Tailor Management System Project

Records7All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high5CVSS 7.0–8.9

Exploited now

Tailor Management System Project records in CISA KEV

No Tailor Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Tailor Management System 7 records HIGH

Records

7 records in Tailor Management System · all components

TI-2020-18440 CVE-2020-36073 · GHSA-799x-v3w2-fm4h

SQL injection vulnerability found in Tailor Management System v.1 allows a remote…

HIGH 73

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the detail parameter of the document.php page.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01349 Published 2023-04-06 No fix listed CWE-89

TI-2020-18441 CVE-2020-36074 · GHSA-4mqf-c682-rprp

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker…

MEDIUM 43

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the title parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01378 Published 2023-04-06 No fix listed CWE-125

TI-2020-18439 CVE-2020-36072 · GHSA-7xmc-69rc-2545

SQL injection vulnerability found in Tailor Management System v.1 allows a remote…

MEDIUM 43

SQL injection vulnerability found in Tailor Management System v.1 allows a remote attacker to execute arbitrary code via the id parameter.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01378 Published 2023-04-06 No fix listed CWE-89

TI-2020-18438 CVE-2020-36071 · GHSA-9vq9-phv2-7f6p

SQL injection vulnerability found in Tailor Management System v.1 allows a remote…

MEDIUM 43

SQL injection vulnerability found in Tailor Management System v.1 allows a remote authenticated attacker to execute arbitrary code via the customer parameter of the email.php page.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01405 Published 2023-04-06 No fix listed CWE-89

TI-2020-18442 CVE-2020-36077 · GHSA-c5xr-pjmq-975c

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker…

MEDIUM 42

SQL injection vulnerability found in Tailor Mangement System v.1 allows a remote attacker to execute arbitrary code via the customer parameter of the orderadd.php file

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00997 Published 2023-04-10 No fix listed CWE-89

TI-2020-14686 CVE-2020-23835 · GHSA-3mpv-gr2q-vh5j

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal…

LOW 33

A Reflected Cross-Site Scripting (XSS) vulnerability in the index.php login-portal webpage of SourceCodester Tailor Management System v1.0 allows remote attackers to harvest keys pressed by an unauthenticated victim who…

CVSS 3.1MEDIUM 6.4 Network No auth User interaction EPSS 0.02289 Published 2020-09-01 No fix listed CWE-79

TI-2021-17375 CVE-2021-40260 · GHSA-cm6p-27v2-hwf5

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor…

LOW 28

Multiple Cross Site Scripting (XSS) vulnerabilities exist in SourceCodester Tailor Management 1.0 via the (1) eid parameter in (a) partedit.php and (b) customeredit.php, the (2) id parameter in (a) editmeasurement.php an…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00662 Published 2021-11-08 No fix listed CWE-79

Open these records in search →

Critical	0
High	5
Medium	2
Low	0
No CVSS	0