Read the docs

Isic.lk Project

Records3All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high2CVSS 7.0–8.9

Exploited now

Isic.lk Project records in CISA KEV

No Isic.lk Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Isic.lk 3 records HIGH

Records

3 records

TI-2022-12685 CVE-2022-30528 · GHSA-9rrf-x8wr-qf65

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published…

Priority HIGH 82

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/mod_users/contro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01261 Published 2022-12-01 No fix listed CWE-89
TI-2022-12686 CVE-2022-30529 · GHSA-88xh-m68r-xr42

File upload vulnerability in asith-eranga ISIC tour booking through version published on…

Priority HIGH 67

File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to upload arbitrary files via /system/application/libs/js/tinymce/plugins/filemanager/dialog.php an…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2022-11-22 No fix listed CWE-434
TI-2022-11255 CVE-2022-28607 · GHSA-g76x-m5qr-8rc7

An issue was discovered in asith-eranga ISIC tour booking through version published on…

Priority MEDIUM 40

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/mod_users/controller.p…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00842 Published 2022-12-01 No fix listed CWE-200
Open these records in search →