Vulnerabilities

Filters

Reset all

1 selected

30 records

Sort

Vendor: Sanitization Management System Project Clear all filters

TI-2022-21688 CVE-2022-44137 · GHSA-j78g-f5h3-2mxj

SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.

LOW 35

SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00861 Published 2022-12-30 No fix listed CWE-89

TI-2022-04322 CVE-2022-4726 · GHSA-q5v8-fx9c-4p9f

SourceCodester Sanitization Management System Admin Login sql injection

HIGH 82

A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00466 Published 2022-12-24 No fix listed CWE-707

TI-2022-21809 CVE-2022-44393 · GHSA-m2v6-95jf-qrvc

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/view_service&id=.

LOW 35

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/view_service&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00861 Published 2022-12-07 No fix listed CWE-89

TI-2022-21784 CVE-2022-44348 · GHSA-95xm-6h45-wh2q

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-12-02 No fix listed CWE-89

TI-2022-21783 CVE-2022-44347 · GHSA-fmxc-j244-qc8x

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/view_inquiry&id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/view_inquiry&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-12-02 No fix listed CWE-89

TI-2022-21782 CVE-2022-44345 · GHSA-8w8c-3p3p-4f93

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=quotes/view_quote&id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=quotes/view_quote&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-12-02 No fix listed CWE-89

TI-2022-21753 CVE-2022-44277 · GHSA-95w8-7597-rm69

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-12-02 No fix listed CWE-89

TI-2022-21764 CVE-2022-44296 · GHSA-9fc4-7rcx-m9x4

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-30 No fix listed CWE-89

TI-2022-21763 CVE-2022-44295 · GHSA-28mg-g72w-qrh2

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-30 No fix listed CWE-89

TI-2022-21762 CVE-2022-44294 · GHSA-cmvq-cmxh-c9cc

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.

HIGH 67

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-30 No fix listed CWE-89

TI-2022-21692 CVE-2022-44151 · GHSA-x64x-2355-5mf3

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

HIGH 82

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00904 Published 2022-11-30 No fix listed CWE-89

TI-2022-21680 CVE-2022-44096 · GHSA-jxw9-vrx3-w35q

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which…

HIGH 82

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00817 Published 2022-11-30 No fix listed CWE-798

TI-2022-22273 CVE-2022-45214 · GHSA-h7f7-94ff-qv67

A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0…

LOW 30

A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter at /php-sms/classes…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00459 Published 2022-11-28 No fix listed CWE-79

TI-2022-21754 CVE-2022-44278 · GHSA-46j6-m846-jw9g

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.

LOW 35

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-23 No fix listed CWE-89

TI-2022-03661 CVE-2022-3992 · GHSA-m9gv-9g9h-qrcr

SourceCodester Sanitization Management System Banner Image cross site scripting

LOW 28

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00513 Published 2022-11-14 No fix listed CWE-707

TI-2022-03614 CVE-2022-3942 · GHSA-v4pr-v4jh-9958

SourceCodester Sanitization Management System cross site scripting

LOW 28

A vulnerability was found in SourceCodester Sanitization Management System and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00725 Published 2022-11-11 No fix listed CWE-707

TI-2022-21164 CVE-2022-43352 · GHSA-r2xr-fv7v-57jp

Sanitization Management System v1.0 was discovered to contain a SQL injection…

HIGH 73

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_quote.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00983 Published 2022-11-07 No fix listed CWE-89

TI-2022-21163 CVE-2022-43351 · GHSA-74qg-4gw6-gpwp

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion…

MEDIUM 62

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00947 Published 2022-11-07 No fix listed

TI-2022-21162 CVE-2022-43350 · GHSA-6h5h-9fx5-m747

Sanitization Management System v1.0 was discovered to contain a SQL injection…

HIGH 73

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_inquiry.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00983 Published 2022-11-07 No fix listed CWE-89

TI-2022-03546 CVE-2022-3868 · GHSA-r2wr-fhmc-wc74

SourceCodester Sanitization Management System sql injection

MEDIUM 43

A vulnerability classified as critical has been found in SourceCodester Sanitization Management System.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00589 Published 2022-11-05 No fix listed CWE-707

TI-2022-21167 CVE-2022-43355 · GHSA-m496-649x-hgmr

Sanitization Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_service.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00983 Published 2022-11-01 No fix listed CWE-89

TI-2022-21166 CVE-2022-43354 · GHSA-pfxf-6vf2-vf9j

Sanitization Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00963 Published 2022-11-01 No fix listed CWE-89

TI-2022-21165 CVE-2022-43353 · GHSA-hf78-32wr-qj94

Sanitization Management System v1.0 was discovered to contain a SQL injection…

LOW 36

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00963 Published 2022-11-01 No fix listed CWE-89

TI-2022-03379 CVE-2022-3674 · GHSA-v2c5-cx8p-42xh

SourceCodester Sanitization Management System missing authentication

MEDIUM 49

A vulnerability has been found in SourceCodester Sanitization Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00623 Published 2022-10-26 No fix listed CWE-287

TI-2022-03378 CVE-2022-3673 · GHSA-q7v9-j7wp-p986

SourceCodester Sanitization Management System Master.php cross site scripting

LOW 27

A vulnerability, which was classified as problematic, was found in SourceCodester Sanitization Management System 1.0.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00397 Published 2022-10-26 No fix listed CWE-707