Vulnerabilities

TI-2024-16636 CVE-2024-25208 · GHSA-mxwf-cc98-j5gr

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site…

MEDIUM 58

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00438 Published 2024-02-14 No fix listed CWE-79

TI-2024-16635 CVE-2024-25207 · GHSA-93m3-2qc8-7wmc

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site…

MEDIUM 58

Barangay Population Monitoring System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability in the Add Resident function at /barangay-population-monitoring-system/masterlist.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00424 Published 2024-02-14 No fix listed CWE-79

TI-2022-21084 CVE-2022-43228 · GHSA-xp6m-95m6-gvf5

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability…

HIGH 67

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /clearance/clearance.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00963 Published 2022-10-28 No fix listed CWE-89

TI-2022-15884 CVE-2022-35175 · GHSA-p2vp-m65p-9h8q

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 44

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /blotter/blotter.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01001 Published 2022-08-18 No fix listed CWE-89

TI-2022-15410 CVE-2022-34557 · GHSA-h66r-9vjc-f9r8

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 40

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/permit/permit.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00935 Published 2022-07-28 No fix listed CWE-89

TI-2022-15049 CVE-2022-34120 · GHSA-mpv4-p366-wr6p

Barangay Management System v1.0 was discovered to contain a remote code execution (RCE)…

MEDIUM 50

Barangay Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the module editing function at /pages/activity/activity.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.19713 Published 2022-07-27 No fix listed CWE-434

TI-2022-15017 CVE-2022-34042 · GHSA-pqrc-qr29-pr59

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability…

LOW 33

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /pages/household/household.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00929 Published 2022-07-20 No fix listed CWE-89

TI-2022-15004 CVE-2022-34024 · GHSA-pqw9-5fgf-mj94

Barangay Management System v1.0 was discovered to contain an arbitrary file upload…

LOW 34

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01408 Published 2022-07-19 No fix listed CWE-434

TI-2022-15003 CVE-2022-34023 · GHSA-pp2q-6wmf-vmxp

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 43

Barangay Management System v1.0 was discovered to contain a SQL injection vulnerability via the hidden_id parameter at /officials/officials.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00783 Published 2022-07-19 No fix listed CWE-89

Vulnerabilities

Filters