CVE-2022-3546: Improper Neutralization

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handler. The manipulation of the argument First Name/Last...

CVE-2022-3549: Incorrect Privilege Assignment

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /csms/admin/?page=user/manageuser of the component Avatar Handler. The manipulation leads to unrestricted upload. The...

CVE-2022-42230: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=...

CVE-2022-42249: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/viewstorage.php?id=...

CVE-2022-42243: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/managestorage.php?id=...

CVE-2022-42250: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/viewdetails.php?id=...