oretnom23

Records782All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical190CVSS 9.0–10.0

CVSS high105CVSS 7.0–8.9

Exploited now

oretnom23 records in CISA KEV

No oretnom23 vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Computer And Laptop Store 32 records HIGH Computer Laboratory Management System 30 records HIGH Human Resource Management System 29 records HIGH Online Eyewear Shop 29 records HIGH Online Food Ordering System 29 records HIGH Clinic's Patient Management System 27 records HIGH Lost And Found Information System 27 records HIGH Customer Support System 19 records HIGH

Records

15 records in Simple Customer Relationship Management System · all components

TI-2023-10244 CVE-2023-24655 · GHSA-g9jv-f7hr-g75x

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL…

MEDIUM 51

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter under the Profile Update function.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01023 Published 2023-03-23 No fix listed CWE-89

TI-2023-00869 CVE-2023-0917 · GHSA-78h7-hg75-rwm2

SourceCodester Simple Customer Relationship Management System login.php sql injection

MEDIUM 44

A vulnerability, which was classified as critical, was found in SourceCodester Simple Customer Relationship Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00929 Published 2023-02-19 No fix listed CWE-89

TI-2023-10269 CVE-2023-24732 · GHSA-mgvp-24qg-rffg

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL…

MEDIUM 42

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01006 Published 2023-03-15 No fix listed CWE-89

TI-2023-10268 CVE-2023-24731 · GHSA-h6g3-934f-25pr

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL…

MEDIUM 42

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01006 Published 2023-03-15 No fix listed CWE-89

TI-2023-10267 CVE-2023-24730 · GHSA-384q-chjj-5g2w

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL…

MEDIUM 42

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01049 Published 2023-03-15 No fix listed CWE-89

TI-2023-10266 CVE-2023-24729 · GHSA-qrj9-3rq9-c254

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL…

MEDIUM 42

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01049 Published 2023-03-15 No fix listed CWE-89

TI-2023-10265 CVE-2023-24728 · GHSA-qvh8-qx49-47qj

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL…

MEDIUM 42

Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01006 Published 2023-03-15 No fix listed CWE-89

TI-2023-10245 CVE-2023-24656 · GHSA-68h6-hrx4-35m4

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL…

MEDIUM 42

Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the subject parameter under the Create Ticket function.