Vulnerabilities

TI-2022-22476 CVE-2022-45527 · GHSA-5cr3-j33r-h368

File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0…

HIGH 82

File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00872 Published 2023-02-08 No fix listed CWE-434

TI-2022-22475 CVE-2022-45526 · GHSA-g37j-3wmf-jf7j

SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0…

HIGH 82

SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01751 Published 2023-02-08 No fix listed CWE-89

Vulnerabilities

Filters

File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0…

SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0…