Vulnerabilities

Filters

2 selected

19 records

Sort

Vendor: Simple Client Management System Project Component: Simple Client Management System Clear all filters

TI-2021-19499 CVE-2021-43657 · GHSA-r6hr-76g7-xqqp

A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester…

LOW 34

A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SCMS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fiel…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00752 Published 2022-12-22 No fix listed CWE-79

TI-2022-12135 CVE-2022-29747 · GHSA-8hmm-7hr3-m5wg

Simple Client Management System 1.0 is vulnerable to SQL Injection via…

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12136 CVE-2022-29748 · GHSA-vh6x-ww4f-w596

Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12137 CVE-2022-29749 · GHSA-27wg-m2hx-ww9m

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12138 CVE-2022-29750 · GHSA-xmfh-r5pv-8728

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12139 CVE-2022-29751 · GHSA-m8v6-qpr2-rcxp

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12321 CVE-2022-29981 · GHSA-vh2x-rjw3-q22p

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12319 CVE-2022-29979 · GHSA-3cvw-6mcp-6g5g

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12320 CVE-2022-29980 · GHSA-r9jc-q8xg-5r6v

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12322 CVE-2022-29982 · GHSA-6f2r-5fh5-mw74

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01608 Published 2022-05-12 No fix listed CWE-89

TI-2022-12323 CVE-2022-29983 · GHSA-599x-56jm-cqmm

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01673 Published 2022-05-12 No fix listed CWE-89

TI-2022-12324 CVE-2022-29984 · GHSA-cwv3-2g8p-2fjx

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.

MEDIUM 45

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01673 Published 2022-05-12 No fix listed CWE-89

TI-2021-19398 CVE-2021-43484 · GHSA-q22j-262m-w3fc

A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0…

MEDIUM 48

A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.03524 Published 2022-03-31 No fix listed CWE-89

TI-2021-19406 CVE-2021-43506 · GHSA-mqg8-2637-hm62

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System…

MEDIUM 45

An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01575 Published 2022-03-31 No fix listed CWE-89

TI-2021-19405 CVE-2021-43505 · GHSA-m4x4-477c-c7vm

Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple…

LOW 25

Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via (1) Add new Client and (2) Add new invoice.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00551 Published 2022-03-31 No fix listed CWE-79

TI-2022-09676 CVE-2022-26285 · GHSA-9q42-phh7-m5r2

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability…

MEDIUM 46

Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02029 Published 2022-03-21 No fix listed CWE-89

TI-2022-09675 CVE-2022-26284 · GHSA-5845-jw3p-fg89

Simple Client Management System v1.0 was discovered to contain a SQL injection…

MEDIUM 46

Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01979 Published 2022-03-21 No fix listed CWE-89

TI-2021-19408 CVE-2021-43510 · GHSA-gxfc-gg6p-8hg5

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0…

MEDIUM 52

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.07515 Published 2022-02-01 No fix listed CWE-89

TI-2021-19407 CVE-2021-43509 · GHSA-rq69-p8w8-hx68

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0…

MEDIUM 46

SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0185 Published 2022-02-01 No fix listed CWE-89