oretnom23

Records782All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical190CVSS 9.0–10.0

CVSS high105CVSS 7.0–8.9

Exploited now

oretnom23 records in CISA KEV

No oretnom23 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Computer And Laptop Store 32 records HIGH Computer Laboratory Management System 30 records HIGH Human Resource Management System 29 records HIGH Online Eyewear Shop 29 records HIGH Online Food Ordering System 29 records HIGH Clinic's Patient Management System 27 records HIGH Lost And Found Information System 27 records HIGH Customer Support System 19 records HIGH

Records

13 records in Simple Cold Storage Management System · all components

TI-2022-20473 CVE-2022-42249 · GHSA-5864-jf4m-4g6j

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=.

HIGH 67

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-06 No fix listed CWE-89

TI-2022-03267 CVE-2022-3548 · GHSA-cx7j-8j2m-xpc3

SourceCodester Simple Cold Storage Management System Add New Storage cross site scripting

MEDIUM 55

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0068 Published 2022-10-17 No fix listed CWE-707

TI-2021-20529 CVE-2021-45435 · GHSA-q3cw-hwhf-x8fr

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management…

MEDIUM 44

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-01-28 No fix listed CWE-89

TI-2022-20474 CVE-2022-42250 · GHSA-r97q-mffq-8wjc

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via…

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01017 Published 2022-10-06 No fix listed CWE-89

TI-2022-20468 CVE-2022-42243 · GHSA-m36x-p6rp-727j

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via…

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-06 No fix listed CWE-89

TI-2022-20467 CVE-2022-42242 · GHSA-h66h-v28h-xm54

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking.

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-06 No fix listed CWE-89

TI-2022-20466 CVE-2022-42241 · GHSA-25rf-gmp9-2p3w

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message.

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-06 No fix listed CWE-89

TI-2022-20459 CVE-2022-42232 · GHSA-9ppg-fg6w-chpp

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-14 No fix listed CWE-89

TI-2022-03268 CVE-2022-3549 · GHSA-7frh-gcmm-q865

SourceCodester Simple Cold Storage Management System Avatar unrestricted upload

LOW 33

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00761 Published 2022-10-17 No fix listed CWE-266

TI-2022-03302 CVE-2022-3587 · GHSA-7w5p-mh95-w8c4

SourceCodester Simple Cold Storage Management System My Account cross site scripting

LOW 25

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00592 Published 2022-10-18 No fix listed CWE-707

TI-2022-03265 CVE-2022-3546 · GHSA-c492-9w3p-xq6q

SourceCodester Simple Cold Storage Management System Create User cross site scripting

LOW 23

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00736 Published 2022-10-17 No fix listed CWE-707

TI-2022-03300 CVE-2022-3585 · GHSA-r6p2-4r7p-7g2c

SourceCodester Simple Cold Storage Management System Contact Us cross-site request forgery

LOW 20

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00345 Published 2022-10-18 No fix listed CWE-863

TI-2022-03297 CVE-2022-3582 · GHSA-cj34-p4xc-82gq

SourceCodester Simple Cold Storage Management System cross-site request forgery

LOW 20

A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00352 Published 2022-10-18 No fix listed CWE-863

Open these records in search →