Lucene search
+L

412 matches found

Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/12 12:00 a.m.•6 views

CVE-2022-29984: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/viewclient&id=...

9.8CVSS8.3AI score0.01673EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•16 views

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deleteinvoice, the id parameter of the...

9.8CVSS8.7AI score0.01608EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•19 views

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deleteservice, the id parameter of the...

9.8CVSS8.7AI score0.01608EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•15 views

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Master. php?f=deletedesignation, the id parameter of t...

9.8CVSS8.7AI score0.01608EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•16 views

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to a SQL injection vulnerability that originates in /cms/admin/?page=user/ The vulnerability is caused by the lack of validati...

9.8CVSS8.7AI score0.01608EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•15 views

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which originates from a vulnerability in /cms/classes/Users.php ? f=delete in the post request id parameter...

9.8CVSS8.7AI score0.01608EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•12 views

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which stems from a lack of validation of external SQL statements in /cms/admin/maintenance...

9.8CVSS8.7AI score0.01608EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•14 views

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to SQL injection, which stems from a lack of validation of external input SQL statements in /cms/admin/?page=...

9.8CVSS8.7AI score0.01673EPSS
SaveExploits1References2
CNNVD
CNNVD
•added 2022/05/12 12:00 a.m.•13 views

Simple Client Management System SQL注入漏洞

Simple Client Management System is a simple client management system from Carlo Montero's personal developer. version 1.0 of Simple Client Management System is vulnerable to a SQL injection vulnerability that originates in /cms/admin/?page= client/viewclient&id= lacks validation of external input...

9.8CVSS8.7AI score0.01673EPSS
SaveExploits1References2
Positive Technologies
Positive Technologies
•added 2022/05/12 12:00 a.m.•4 views

PT-2022-19815

Name of the Vulnerable Software and Affected Versions Simple Client Management System version 1.0 Description The issue is related to SQL Injection. It can be exploited via the id parameter in the /cms/admin?page=client/manage client&id= API endpoint. Recommendations For Simple Client Management...

9.8CVSS0.01608EPSS
SaveExploits1References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/05/12 12:00 a.m.•6 views

CVE-2022-29747: Improper Neutralization of Special Elements used in an SQL Command

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manageinvoice&id= // Leak place --- id...

9.8CVSS8.3AI score0.01608EPSS
SaveExploits1References2
OSV
OSV
•added 2022/04/12 5:15 p.m.•13 views

CVE-2022-27667

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

7.5CVSS7.3AI score0.0136EPSS
SaveExploits0References2
attackerkb
attackerkb
•added 2022/04/12 5:15 p.m.•9 views

CVE-2022-27667

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

7.5CVSS5.9AI score0.0136EPSS
SaveExploits0References3Affected Software1
Prion
Prion
•added 2022/04/12 5:15 p.m.•31 views

Information disclosure

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

4.3CVSS7.4AI score0.0136EPSS
SaveExploits0References2Affected Software1
Positive Technologies
Positive Technologies
•added 2022/04/12 12:00 a.m.•3 views

PT-2022-18560

Name of the Vulnerable Software and Affected Versions SAP BusinessObjects Business Intelligence platform, Client Management Console CMC version 430 Description The issue allows an attacker to access restricted information under certain conditions, leading to information disclosure. Recommendation...

7.5CVSS5.8AI score0.0136EPSS
SaveExploits0References5
Rapid7 Vulnerability Database (full)
Rapid7 Vulnerability Database (full)
•added 2022/04/12 12:00 a.m.•4 views

CVE-2022-27667: Exposure of Sensitive Information to an Unauthorized Actor

Under certain conditions, SAP BusinessObjects Business Intelligence platform, Client Management Console CMC - version 430, allows an attacker to access information which would otherwise be restricted, leading to Information Disclosure...

7.5CVSS7.3AI score0.0136EPSS
SaveExploits0References2
CNVD
CNVD
•added 2022/04/01 12:00 a.m.•40 views

Client management SQL injection vulnerability

Simple Client Management System is a simple web-based application that provides an online platform to manage company customer invoices.Simple Client Management System 1.0 is vulnerable to a SQL injection vulnerability that could be caused by a password parameter in Login.php. No detailed...

9.8CVSS2.5AI score0.01575EPSS
SaveExploits1References1
OSV
OSV
•added 2022/03/31 7:15 p.m.•17 views

CVE-2021-43484

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

9.8CVSS5.9AI score0.03524EPSS
SaveExploits0References1
attackerkb
attackerkb
•added 2022/03/31 7:15 p.m.•10 views

CVE-2021-43484

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

9.8CVSS7.4AI score0.03524EPSS
SaveExploits0References2
NVD
NVD
•added 2022/03/31 7:15 p.m.•27 views

CVE-2021-43484

A Remote Code Execution RCE vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request...

9.8CVSS0.03524EPSS
SaveExploits0References1
Rows per page
Query Builder