Security Vulnerabilities - CVEs Published In 2022
An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to write arbitrary files to the directory \PromoPhoto\, regardless of file type or size.
CVSS Score
7.1
EPSS Score
0.003
Published
2022-09-12
An issue in Micro-Star International MSI Feature Navigator v1.0.1808.0901 allows attackers to download arbitrary files regardless of file type or size.
CVSS Score
5.5
EPSS Score
0.003
Published
2022-09-12
Multiple persistent cross-site scripting (XSS) vulnerabilities in index.php in tramyardg Hotel Management System 1.0 allow remote attackers to inject arbitrary web script or HTML via multiple parameters such as "fullname".
CVSS Score
5.4
EPSS Score
0.008
Published
2022-09-12
A SQL injection vulnerability in SupplierDAO.java in sazanrjb InventoryManagementSystem 1.0 allows attackers to execute arbitrary SQL commands via the parameters such as "searchTxt".
CVSS Score
7.5
EPSS Score
0.011
Published
2022-09-12
Cross-site scripting vulnerability in Movable Type plugin A-Form versions prior to 4.1.1 (for Movable Type 7 Series) and versions prior to 3.9.1 (for Movable Type 6 Series) allows a remote unauthenticated attacker to inject an arbitrary script.
CVSS Score
6.1
EPSS Score
0.01
Published
2022-09-12
In Simple Online Book Store System 1.0 in /admin_book.php the Title, Author, and Description parameters are vulnerable to Cross Site Scripting(XSS).
CVSS Score
5.4
EPSS Score
0.005
Published
2022-09-12
In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
CVSS Score
9.8
EPSS Score
0.011
Published
2022-09-12
SysAid Help Desk before 22.1.65 allows XSS, aka FR# 66542 and 65579.
CVSS Score
6.1
EPSS Score
0.005
Published
2022-09-11
SysAid Help Desk before 22.1.65 allows XSS in the Password Services module, aka FR# 67241.
CVSS Score
6.1
EPSS Score
0.005
Published
2022-09-11
SysAid Help Desk before 22.1.65 allows XSS via the Linked SRs field, aka FR# 67258.
CVSS Score
6.1
EPSS Score
0.005
Published
2022-09-11