Vulnerabilities

TI-2022-23268 CVE-2022-46968 · GHSA-6g5m-8v93-8rc7

A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue…

LOW 25

A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00519 Published 2023-01-27 No fix listed CWE-79

TI-2022-23267 CVE-2022-46967 · GHSA-pxxx-pwpw-j3mp

An access control issue in Revenue Collection System v1.0 allows unauthenticated…

MEDIUM 51

An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01153 Published 2023-01-26 No fix listed CWE-522

TI-2022-23266 CVE-2022-46966 · GHSA-xqg5-vgfp-2g7g

Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.

HIGH 76

Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01162 Published 2023-01-26 No fix listed CWE-89

Vulnerabilities

Filters

A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue…

An access control issue in Revenue Collection System v1.0 allows unauthenticated…

Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.