Oretnom23: Security Vulnerabilities
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the contact parameter in the user profile update function.
CVSS Score
8.8
EPSS Score
0.004
Published
2023-03-15
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the address parameter in the user profile update function.
CVSS Score
8.8
EPSS Score
0.015
Published
2023-03-15
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the company parameter in the user profile update function.
CVSS Score
8.8
EPSS Score
0.015
Published
2023-03-15
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the query parameter in the user profile update function.
CVSS Score
8.8
EPSS Score
0.004
Published
2023-03-15
Simple Customer Relationship Management System v1.0 as discovered to contain a SQL injection vulnerability via the gender parameter in the user profile update function.
CVSS Score
8.8
EPSS Score
0.004
Published
2023-03-15
A vulnerability classified as critical was found in SourceCodester Student Study Center Desk Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /admin/user/manage_user.php. The manipulation of the argument id leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223111.
CVSS Score
4.7
EPSS Score
0.001
Published
2023-03-15
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter under the Admin Panel.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-02-27
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter on the registration page.
CVSS Score
5.4
EPSS Score
0.001
Published
2023-02-27
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the Description parameter under the Create ticket function.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-02-27
Simple Customer Relationship Management System v1.0 was discovered to contain a SQL injection vulnerability via the oldpass parameter under the Change Password function.
CVSS Score
8.8
EPSS Score
0.003
Published
2023-02-27