Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

2 records

Vendor: Simple College Project Component: Simple College Clear all filters
TI-2020-17121 CVE-2020-28173 · GHSA-48x2-prxg-j7jq

Simple College Website 1.0 allows a user to conduct remote code execution via…

Priority LOW 37

Simple College Website 1.0 allows a user to conduct remote code execution via /alumni/admin/ajax.php?action=save_settings when uploading a malicious file using the image upload functionality, which is stored in /alumni/a…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.03183 Published 2021-03-31 No fix listed CWE-434
TI-2020-17120 CVE-2020-28172 · GHSA-chjm-3qf2-f2rc

A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated…

Priority MEDIUM 47

A SQL injection vulnerability in Simple College Website 1.0 allows remote unauthenticated attackers to bypass the admin authentication mechanism in college_website/admin/ajax.php?action=login, thus gaining access to the…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02986 Published 2021-03-31 No fix listed CWE-89