Sanitization Management System Project

Records30All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical6CVSS 9.0–10.0

CVSS high15CVSS 7.0–8.9

Exploited now

Sanitization Management System Project records in CISA KEV

No Sanitization Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Sanitization Management System 30 records HIGH

Records

30 records in Sanitization Management System · all components

TI-2022-21692 CVE-2022-44151 · GHSA-x64x-2355-5mf3

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

HIGH 82

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00904 Published 2022-11-30 No fix listed CWE-89

TI-2022-21680 CVE-2022-44096 · GHSA-jxw9-vrx3-w35q

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which…

HIGH 82

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00817 Published 2022-11-30 No fix listed CWE-798

TI-2022-04322 CVE-2022-4726 · GHSA-q5v8-fx9c-4p9f

SourceCodester Sanitization Management System Admin Login sql injection

HIGH 82

A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00466 Published 2022-12-24 No fix listed CWE-707

TI-2022-03234 CVE-2022-3504 · GHSA-cp6r-jg55-7qfj

SourceCodester Sanitization Management System sql injection

HIGH 75

A vulnerability was found in SourceCodester Sanitization Management System and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00775 Published 2022-10-14 No fix listed CWE-707

TI-2022-21164 CVE-2022-43352 · GHSA-r2xr-fv7v-57jp

Sanitization Management System v1.0 was discovered to contain a SQL injection…

HIGH 73

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_quote.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00983 Published 2022-11-07 No fix listed CWE-89

TI-2022-21162 CVE-2022-43350 · GHSA-6h5h-9fx5-m747

Sanitization Management System v1.0 was discovered to contain a SQL injection…

HIGH 73

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_inquiry.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00983 Published 2022-11-07 No fix listed CWE-89

TI-2022-21784 CVE-2022-44348 · GHSA-95xm-6h45-wh2q

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-12-02 No fix listed CWE-89

TI-2022-21783 CVE-2022-44347 · GHSA-fmxc-j244-qc8x

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/view_inquiry&id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/view_inquiry&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-12-02 No fix listed CWE-89

TI-2022-21782 CVE-2022-44345 · GHSA-8w8c-3p3p-4f93

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=quotes/view_quote&id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=quotes/view_quote&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-12-02 No fix listed CWE-89

TI-2022-21764 CVE-2022-44296 · GHSA-9fc4-7rcx-m9x4

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-30 No fix listed CWE-89

TI-2022-21763 CVE-2022-44295 · GHSA-28mg-g72w-qrh2

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-30 No fix listed CWE-89

TI-2022-21762 CVE-2022-44294 · GHSA-cmvq-cmxh-c9cc

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-30 No fix listed CWE-89

TI-2022-21753 CVE-2022-44277 · GHSA-95w8-7597-rm69

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-12-02 No fix listed CWE-89

TI-2022-21163 CVE-2022-43351 · GHSA-74qg-4gw6-gpwp

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion…

MEDIUM 62

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00947 Published 2022-11-07 No fix listed

TI-2022-03235 CVE-2022-3505 · GHSA-35v6-pv3q-68m3

SourceCodester Sanitization Management System cross site scripting

MEDIUM 58

A vulnerability was found in SourceCodester Sanitization Management System.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00603 Published 2022-10-14 No fix listed CWE-707

TI-2022-03379 CVE-2022-3674 · GHSA-v2c5-cx8p-42xh

SourceCodester Sanitization Management System missing authentication

MEDIUM 49

A vulnerability has been found in SourceCodester Sanitization Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2022-10-26 No fix listed CWE-287

TI-2022-03546 CVE-2022-3868 · GHSA-r2wr-fhmc-wc74

SourceCodester Sanitization Management System sql injection

MEDIUM 43

A vulnerability classified as critical has been found in SourceCodester Sanitization Management System.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00589 Published 2022-11-05 No fix listed CWE-707

TI-2022-21167 CVE-2022-43355 · GHSA-m496-649x-hgmr

Sanitization Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_service.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00983 Published 2022-11-01 No fix listed CWE-89

TI-2022-21166 CVE-2022-43354 · GHSA-pfxf-6vf2-vf9j

Sanitization Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00963 Published 2022-11-01 No fix listed CWE-89

TI-2022-21165 CVE-2022-43353 · GHSA-hf78-32wr-qj94

Sanitization Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00963 Published 2022-11-01 No fix listed CWE-89

TI-2022-21809 CVE-2022-44393 · GHSA-m2v6-95jf-qrvc

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/view_service&id=.

LOW 35

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/view_service&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00861 Published 2022-12-07 No fix listed CWE-89

TI-2022-21754 CVE-2022-44278 · GHSA-46j6-m846-jw9g

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.

LOW 35

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-23 No fix listed CWE-89

TI-2022-21688 CVE-2022-44137 · GHSA-j78g-f5h3-2mxj

SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.

LOW 35

SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00861 Published 2022-12-30 No fix listed CWE-89

TI-2022-22273 CVE-2022-45214 · GHSA-h7f7-94ff-qv67

A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0…

LOW 30

A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter at /php-sms/classes…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00459 Published 2022-11-28 No fix listed CWE-79

TI-2022-03661 CVE-2022-3992 · GHSA-m9gv-9g9h-qrcr

SourceCodester Sanitization Management System Banner Image cross site scripting

LOW 28

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00513 Published 2022-11-14 No fix listed CWE-707

Open these records in search →