Razormist

Records76All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical10CVSS 9.0–10.0

CVSS high22CVSS 7.0–8.9

Exploited now

Razormist records in CISA KEV

No Razormist vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Online Discussion Forum Site 16 records HIGH Loan Management System 11 records HIGH Employee Management System 9 records HIGH Online Polling System 7 records HIGH Student Result Management System 6 records HIGH Simple Membership System 5 records HIGH Basic Library System 3 records LOW Phone Contact Manager System 3 records MEDIUM

Records

11 records in Loan Management System · all components

TI-2022-02563 CVE-2022-2766 · GHSA-w7q9-7cvv-4qj9

SourceCodester Loan Management System index.php sql injection

HIGH 81

A vulnerability was found in SourceCodester Loan Management System.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01284 Published 2022-08-11 No fix listed CWE-89

TI-2022-02466 CVE-2022-2667 · GHSA-rq5p-872q-rp6q

SourceCodester Loan Management System delete_lplan.php sql injection

HIGH 71

A vulnerability was found in SourceCodester Loan Management System and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00894 Published 2022-08-05 No fix listed CWE-89

TI-2023-05795 CVE-2023-6312 · GHSA-42w4-gh3x-8p8w

SourceCodester Loan Management System Users Page deleteUser.php delete_user sql injection

HIGH 65

A vulnerability was found in SourceCodester Loan Management System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00763 Published 2023-11-27 No fix listed CWE-89

TI-2023-05793 CVE-2023-6310 · GHSA-cjfx-4949-9h9r

SourceCodester Loan Management System deleteBorrower.php delete_borrower sql injection

HIGH 65

A vulnerability has been found in SourceCodester Loan Management System 1.0 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00763 Published 2023-11-27 No fix listed CWE-89

TI-2023-11996 CVE-2023-27242 · GHSA-h5g5-ch4q-387c

SourceCodester Loan Management System v1.0 was discovered to contain a cross-site…

MEDIUM 58

SourceCodester Loan Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Type parameter under the Edit Loan Types module.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00427 Published 2023-03-24 No fix listed CWE-79

TI-2024-32376 CVE-2024-48415 · GHSA-6h6m-782c-4x8h

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via…

MEDIUM 56

itsourcecode Loan Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via a crafted payload to the lastname, firstname, middlename, address, contact_no, email and tax_id parameters in new borrowers functio…

CVSS 3.1MEDIUM 5.0 Local No auth User interaction EPSS 0.00359 Published 2024-10-22 No fix listed CWE-79

TI-2024-20910 CVE-2024-31678 · GHSA-j6qm-7hmm-gfqm

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the…

MEDIUM 50

Sourcecodester Loan Management System v1.0 is vulnerable to SQL Injection via the "password" parameter in the "login.php" file.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00594 Published 2024-04-11 No fix listed CWE-89

TI-2022-17306 CVE-2022-37138 · GHSA-9rf5-c55x-ggx3

Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows…

MEDIUM 44

Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01215 Published 2022-09-14 No fix listed CWE-89

TI-2022-02465 CVE-2022-2666 · GHSA-8cv3-mr7x-wh73

SourceCodester Loan Management System login.php sql injection

MEDIUM 44

A vulnerability has been found in SourceCodester Loan Management System and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00946 Published 2023-01-07 No fix listed CWE-89

TI-2023-05794 CVE-2023-6311 · GHSA-xg7j-42pr-9v55

SourceCodester Loan Management System Loan Type Page delete_ltype.php delete_ltype sql injection

LOW 33

A vulnerability was found in SourceCodester Loan Management System 1.0 and classified as critical.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00763 Published 2023-11-27 No fix listed CWE-89

TI-2022-17307 CVE-2022-37139 · GHSA-2hj2-cv37-jq8x

Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

LOW 25

Loan Management System version 1.0 suffers from a persistent cross site scripting vulnerability.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00637 Published 2022-09-14 No fix listed CWE-79

Open these records in search →