Open Source Sacco Management System Project

Records8All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high8CVSS 7.0–8.9

Exploited now

Open Source Sacco Management System Project records in CISA KEV

No Open Source Sacco Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Open Source Sacco Management System 8 records HIGH

Records

8 records in Open Source Sacco Management System · all components

TI-2022-20420 CVE-2022-42143 · GHSA-48qx-xjhj-jpgg

Open Source SACCO Management System v1.0 is vulnerable to SQL Injection via /sacco_shield/manage_payment.php.

HIGH 73

Open Source SACCO Management System v1.0 is vulnerable to SQL Injection via /sacco_shield/manage_payment.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00998 Published 2022-10-17 No fix listed CWE-89

TI-2022-20453 CVE-2022-42218 · GHSA-9hh8-g77q-g2jm

Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php.

HIGH 67

Open Source SACCO Management System v1.0 vulnerable to SQL Injection via /sacco_shield/manage_loan.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-18 No fix listed CWE-89

TI-2022-19942 CVE-2022-41532 · GHSA-hvxq-48xh-c489

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_plan.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2022-10-11 No fix listed CWE-89

TI-2022-19941 CVE-2022-41530 · GHSA-77p8-wh75-m8pf

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_borrower.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2022-10-11 No fix listed CWE-89

TI-2022-19946 CVE-2022-41536 · GHSA-4v3p-jpv7-wp4g

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection…

LOW 35

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_user.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-14 No fix listed CWE-89

TI-2022-19945 CVE-2022-41535 · GHSA-jfp5-78vp-9mh6

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection…

LOW 35

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_borrower.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-14 No fix listed CWE-89

TI-2022-19929 CVE-2022-41515 · GHSA-3597-jh2f-p25q

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection…

LOW 33

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_payment.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-07 No fix listed CWE-89

TI-2022-19928 CVE-2022-41514 · GHSA-6mr7-g7xq-392p

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection…

LOW 33

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_loan.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00891 Published 2022-10-07 No fix listed CWE-89

Open these records in search →

Critical	0
High	8
Medium	0
Low	0
No CVSS	0