VendorsSanitization Management System Projectsanitization_management_system1.0

Vulnerabilities

Sanitization Management System Project Sanitization Management System 1.0

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

26CVEs

CVE-2022-44151

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

Published 2022-11-30 · Modified

9.8EPSS 0.009

CVE-2022-44096

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

Published 2022-11-30 · Modified

9.8EPSS 0.008

CVE-2022-3674

SourceCodester Sanitization Management System missing authentication

Published 2022-10-26 · Modified

9.8EPSS 0.006

CVE-2022-3868

SourceCodester Sanitization Management System sql injection

Published 2022-11-05 · Modified

9.8EPSS 0.005

CVE-2022-4726

SourceCodester Sanitization Management System Admin Login sql injection

Published 2022-12-24 · Modified

9.8EPSS 0.004

CVE-2022-43350

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_inquiry.

Published 2022-11-07 · Modified

7.2EPSS 0.009

CVE-2022-43352

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_quote.

Published 2022-11-07 · Modified

7.2EPSS 0.009

CVE-2022-43355

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_service.

Published 2022-11-01 · Modified

7.2EPSS 0.009

CVE-2022-43353

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/view_order.

Published 2022-11-01 · Modified

7.2EPSS 0.008

CVE-2022-43354

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=orders/manage_request.

Published 2022-11-01 · Modified

7.2EPSS 0.008

CVE-2022-44393

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/view_service&id=.

Published 2022-12-07 · Modified

7.2EPSS 0.008

CVE-2022-44137

SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.

Published 2022-12-30 · Modified

7.2EPSS 0.008

CVE-2022-44278

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.

Published 2022-11-23 · Modified

7.2EPSS 0.008

CVE-2022-44277

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/classes/Master.php?f=delete_product.

Published 2022-12-02 · Modified

7.2EPSS 0.007

CVE-2022-44294

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=services/manage_service&id=.

Published 2022-11-30 · Modified

7.2EPSS 0.007

CVE-2022-44295

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/assign_team.php?id=.

Published 2022-11-30 · Modified

7.2EPSS 0.007

CVE-2022-44296

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/quotes/manage_remark.php?id=.

Published 2022-11-30 · Modified

7.2EPSS 0.007

CVE-2022-44345

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=quotes/view_quote&id=.

Published 2022-12-02 · Modified

7.2EPSS 0.007

CVE-2022-44347

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=inquiries/view_inquiry&id=.

Published 2022-12-02 · Modified

7.2EPSS 0.007

CVE-2022-44348

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/orders/update_status.php?id=.

Published 2022-12-02 · Modified

7.2EPSS 0.007

CVE-2022-43351

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.

Published 2022-11-07 · Modified

6.5EPSS 0.008

CVE-2022-45214

A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter at /php-sms/classes/Login.php.

Published 2022-11-28 · Modified

6.1EPSS 0.004

CVE-2022-3519

SourceCodester Sanitization Management System Quote Requests Tab cross site scripting

Published 2022-10-15 · Modified

6.1EPSS 0.004

CVE-2022-3673

SourceCodester Sanitization Management System Master.php cross site scripting

Published 2022-10-26 · Modified

6.1EPSS 0.004

CVE-2022-3672

SourceCodester Sanitization Management System SystemSettings.php cross site scripting