Vulnerabilities

TI-2022-03302 CVE-2022-3587 · GHSA-7w5p-mh95-w8c4

SourceCodester Simple Cold Storage Management System My Account cross site scripting

LOW 25

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00592 Published 2022-10-18 No fix listed CWE-707

TI-2022-03300 CVE-2022-3585 · GHSA-r6p2-4r7p-7g2c

SourceCodester Simple Cold Storage Management System Contact Us cross-site request forgery

LOW 20

A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00345 Published 2022-10-18 No fix listed CWE-863

TI-2022-03297 CVE-2022-3582 · GHSA-cj34-p4xc-82gq

SourceCodester Simple Cold Storage Management System cross-site request forgery

LOW 20

A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 4.3 Network No auth User interaction EPSS 0.00352 Published 2022-10-18 No fix listed CWE-863

TI-2022-03268 CVE-2022-3549 · GHSA-7frh-gcmm-q865

SourceCodester Simple Cold Storage Management System Avatar unrestricted upload

LOW 33

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00761 Published 2022-10-17 No fix listed CWE-266

TI-2022-03267 CVE-2022-3548 · GHSA-cx7j-8j2m-xpc3

SourceCodester Simple Cold Storage Management System Add New Storage cross site scripting

MEDIUM 55

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.0068 Published 2022-10-17 No fix listed CWE-707

TI-2022-03265 CVE-2022-3546 · GHSA-c492-9w3p-xq6q

SourceCodester Simple Cold Storage Management System Create User cross site scripting

LOW 23

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic.

CVSS 3.1MEDIUM 4.8 Network High privileges User interaction EPSS 0.00736 Published 2022-10-17 No fix listed CWE-707

TI-2022-20459 CVE-2022-42232 · GHSA-9ppg-fg6w-chpp

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-14 No fix listed CWE-89

TI-2022-20474 CVE-2022-42250 · GHSA-r97q-mffq-8wjc

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via…

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01017 Published 2022-10-06 No fix listed CWE-89

TI-2022-20473 CVE-2022-42249 · GHSA-5864-jf4m-4g6j

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=.

HIGH 67

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-06 No fix listed CWE-89

TI-2022-20468 CVE-2022-42243 · GHSA-m36x-p6rp-727j

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via…

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-06 No fix listed CWE-89

TI-2022-20467 CVE-2022-42242 · GHSA-h66h-v28h-xm54

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking.

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-06 No fix listed CWE-89

TI-2022-20466 CVE-2022-42241 · GHSA-25rf-gmp9-2p3w

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message.

LOW 34

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01039 Published 2022-10-06 No fix listed CWE-89

TI-2021-20529 CVE-2021-45435 · GHSA-q3cw-hwhf-x8fr

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management…

MEDIUM 44

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01096 Published 2022-01-28 No fix listed CWE-89

Vulnerabilities

Filters