Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

3 records

Vendor: Isic.lk Project Clear all filters
TI-2022-12685 CVE-2022-30528 · GHSA-9rrf-x8wr-qf65

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published…

Priority HIGH 82

SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via the username parameter to /system/user/modules/mod_users/contro…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01261 Published 2022-12-01 No fix listed CWE-89
TI-2022-11255 CVE-2022-28607 · GHSA-g76x-m5qr-8rc7

An issue was discovered in asith-eranga ISIC tour booking through version published on…

Priority MEDIUM 40

An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the action parameter to /system/user/modules/mod_users/controller.p…

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00842 Published 2022-12-01 No fix listed CWE-200
TI-2022-12686 CVE-2022-30529 · GHSA-88xh-m68r-xr42

File upload vulnerability in asith-eranga ISIC tour booking through version published on…

Priority HIGH 67

File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to upload arbitrary files via /system/application/libs/js/tinymce/plugins/filemanager/dialog.php an…

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01019 Published 2022-11-22 No fix listed CWE-434