Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

17 records

Vendor: Amssplus Clear all filters
TI-2020-19270 CVE-2020-37135 · GHSA-ffff-75w5-5j62

AMSS++ 4.7 - Backdoor Admin Account

Priority HIGH 81

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials.

CVSS 4.0CRITICAL 9.3 Network No auth No interaction EPSS 0.00475 Published 2026-02-06 No fix listed CWE-798
TI-2024-02417 CVE-2024-2598 · GHSA-x8pf-qjr3-w5cf

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/select_send_2.php, in multiple p…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2024-03-18 No fix listed CWE-79
TI-2024-02416 CVE-2024-2597 · GHSA-936g-q8pj-qjhp

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_school_person.php, in…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2024-03-18 No fix listed CWE-79
TI-2024-02415 CVE-2024-2596 · GHSA-7j4f-2m7v-2cjv

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/mail/main/select_send.php, in multiple par…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2024-03-18 No fix listed CWE-79
TI-2024-02414 CVE-2024-2595 · GHSA-gp97-78rf-vw76

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_khet_person.php, in t…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00403 Published 2024-03-18 No fix listed CWE-79
TI-2024-02413 CVE-2024-2594 · GHSA-wh3q-8jwf-qv4m

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 31

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/admin/index.php, in multiple parameters.

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.00411 Published 2024-03-18 No fix listed CWE-79
TI-2024-02412 CVE-2024-2593 · GHSA-2w4c-wrx8-g8wh

Cross-Site Scripting (XSS) in AMSS++

Priority LOW 32

Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_group.php, in the 'b_…

CVSS 3.1HIGH 7.1 Network No auth User interaction EPSS 0.0042 Published 2024-03-18 No fix listed CWE-79
TI-2024-02411 CVE-2024-2592 · GHSA-h52g-q78r-649c

SQL injection vulnerability in AMSS++

Priority MEDIUM 42

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00478 Published 2024-03-18 No fix listed CWE-89
TI-2024-02410 CVE-2024-2591 · GHSA-g9rx-gc8h-mpjj

SQL injection vulnerability in AMSS++

Priority MEDIUM 42

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00534 Published 2024-03-18 No fix listed CWE-89
TI-2024-02409 CVE-2024-2590 · GHSA-cgvh-9643-55w4

SQL injection vulnerability in AMSS++

Priority LOW 38

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00523 Published 2024-03-18 No fix listed CWE-89
TI-2024-02408 CVE-2024-2589 · GHSA-m2m5-v2p8-2hr5

SQL injection vulnerability in AMSS++

Priority MEDIUM 42

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00534 Published 2024-03-18 No fix listed CWE-89
TI-2024-02407 CVE-2024-2588 · GHSA-7hrp-6pgm-w8r3

SQL injection vulnerability in AMSS++

Priority MEDIUM 44

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00534 Published 2024-03-18 No fix listed CWE-89
TI-2024-02406 CVE-2024-2587 · GHSA-59xm-w7f6-pq99

SQL injection vulnerability in AMSS++

Priority LOW 36

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_person.php, in multiple parameters.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00523 Published 2024-03-18 No fix listed CWE-89
TI-2024-02405 CVE-2024-2586 · GHSA-64jx-996x-wx5w

SQL injection vulnerability in AMSS++

Priority LOW 38

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00586 Published 2024-03-18 No fix listed CWE-89
TI-2024-02404 CVE-2024-2585 · GHSA-846c-6fq3-w23h

SQL injection vulnerability in AMSS++

Priority MEDIUM 44

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00523 Published 2024-03-18 No fix listed CWE-89
TI-2024-02403 CVE-2024-2584 · GHSA-5qx9-v4cj-3w5q

SQL injection vulnerability in AMSS++

Priority MEDIUM 42

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in the 'sd_index' parameter.

CVSS 3.1HIGH 8.2 Network No auth No interaction EPSS 0.00586 Published 2024-03-18 No fix listed CWE-89