Security Vulnerabilities - CVEs Published In April 2022
Attendance and Payroll System v1.0 was discovered to contain a SQL injection vulnerability via the component \admin\position_edit.php.
CVSS Score
8.8
EPSS Score
0.002
Published
2022-04-21
Purchase Order Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via /purchase_order/admin/?page=user.
CVSS Score
9.8
EPSS Score
0.228
Published
2022-04-21
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_item.
CVSS Score
9.8
EPSS Score
0.082
Published
2022-04-21
Purchase Order Management System v1.0 was discovered to contain a SQL injection vulnerability via /purchase_order/classes/Master.php?f=delete_supplier.
CVSS Score
9.8
EPSS Score
0.082
Published
2022-04-21
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-04-21
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=school_year.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-04-21
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=student_p&id=.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-04-21
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_amenity.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-04-21
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_type.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-04-21
Simple Real Estate Portal System v1.0 was discovered to contain a SQL injection vulnerability via /reps/classes/Master.php?f=delete_estate.
CVSS Score
9.8
EPSS Score
0.003
Published
2022-04-21