Simple Client Management System Project

Records19All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical17CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

Simple Client Management System Project records in CISA KEV

No Simple Client Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Simple Client Management System 19 records MEDIUM

Records

19 records in Simple Client Management System · all components

TI-2021-19408 CVE-2021-43510 · GHSA-gxfc-gg6p-8hg5

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0…

MEDIUM 52

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07515 Published 2022-02-01 No fix listed CWE-89

TI-2021-19398 CVE-2021-43484 · GHSA-q22j-262m-w3fc

A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0…

MEDIUM 48

A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03524 Published 2022-03-31 No fix listed CWE-89

TI-2022-09676 CVE-2022-26285 · GHSA-9q42-phh7-m5r2

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 46

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02029 Published 2022-03-21 No fix listed CWE-89

TI-2022-09675 CVE-2022-26284 · GHSA-5845-jw3p-fg89

Simple Client Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 46

Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01979 Published 2022-03-21 No fix listed CWE-89

TI-2021-19407 CVE-2021-43509 · GHSA-rq69-p8w8-hx68

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0…

MEDIUM 46

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0185 Published 2022-02-01 No fix listed CWE-89

TI-2022-12324 CVE-2022-29984 · GHSA-cwv3-2g8p-2fjx

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01673 Published 2022-05-12 No fix listed CWE-89

TI-2022-12323 CVE-2022-29983 · GHSA-599x-56jm-cqmm

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01673 Published 2022-05-12 No fix listed CWE-89

TI-2022-12322 CVE-2022-29982 · GHSA-6f2r-5fh5-mw74

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.