Vulnerabilities
Vulnerable Software
Wms Project:  >> Wms  Security Vulnerabilities
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function.
CVSS Score
9.8
EPSS Score
0.005
Published
2023-02-17
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
CVSS Score
9.8
EPSS Score
0.002
Published
2021-08-27
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".
CVSS Score
9.8
EPSS Score
0.016
Published
2021-07-12


Contact Us

Shodan ® - All rights reserved