CVE-2021-43505

Multiple Cross Site Scripting XSS vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via 1 Add new Client and 2 Add new invoice...

CVE-2021-43657

A Stored Cross-site scripting XSS vulnerability via MAster.php in Sourcecodetester Simple Client Management System SCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields...

CVE-2021-43657

A Stored Cross-site scripting XSS vulnerability via MAster.php in Sourcecodetester Simple Client Management System SCMS 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields...

Simple Client Management System 跨站脚本漏洞

Simple Client Management System is a Simple Client Management System by Carlo Montero Personal Developer. A security vulnerability exists in Simple Client Management System SCMS version 1.0, which stems from a stored cross-site scripting XSS vulnerability that could allow a remote attacker to...

CVE-2022-29750

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...

CVE-2022-29750

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deleteservice...

CVE-2022-29983

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/viewinvoice&id=...

CVE-2022-29984

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/viewclient&id=...

CVE-2022-29979

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deletedesignation...

Sql injection

Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manageclient&id=...

CVE-2022-29748

Affected software: Simple Client Management System 1.0. The vulnerability is a SQL injection in the CMS path cms/admin?page=client/manage_client&id= (also described as manage_client&id=). Root cause: lack of input validation/external input handling in the affected parameter, enabling arbitrary SQ...

CVE-2022-29750

The vulnerability CVE-2022-29750 affects Simple Client Management System 1.0. It enables SQL Injection through /cms/classes/Master.php?f=delete_service due to insufficient validation of the id parameter, allowing potentially unauthorized access to database data. The entry indicates high-severity ...

CVE-2022-29751

CVE-2022-29751 affects Simple Client Management System 1.0. The vulnerability is an SQL injection in the delete_client path (/cms/classes/Master.php?f=delete_client) caused by lack of input validation, enabling arbitrary SQL execution and potential data disclosure/ modification. Root cause stated...

CVE-2022-29981

CVE-2022-29981 affects Simple Client Management System 1.0. The vulnerability is an SQL Injection via the endpoint /cms/classes/Users.php?f=delete, stemming from lack of input validation of the id parameter in the POST request. Public documents consistently describe this as a SQL injection affect...

CVE-2022-29979

CVE-2022-29979 affects Simple Client Management System 1.0. The vulnerability is an SQL injection in /cms/classes/Master.php?f=delete_designation caused by unsanitized input in the id parameter, enabling arbitrary SQL execution. Documented impact indicates partial confidentiality, integrity, and ...

CVE-2022-29979

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=deletedesignation...

CVE-2022-29980

The vulnerability CVE-2022-29980 affects Simple Client Management System 1.0. The issue is a SQL injection in the admin user management page, specifically via /cms/admin/?page=user/manage_user&id=, caused by unvalidated external input. This leads to potential exposure of sensitive database data a...

CVE-2022-29982

CVE-2022-29982 affects the Simple Client Management System 1.0. The vulnerability is a SQL injection in the maintenance page handler: /cms/admin/maintenance/manage_service.php?id=, arising from unsafely constructed SQL statements in user-supplied input. The provided sources describe a risk of exp...

CVE-2022-29983

The CVE-2022-29983 entry concerns Simple Client Management System 1.0 and an SQL Injection vulnerability in the admin invoice view endpoint (/cms/admin/?page=invoice/view_invoice&id=). The connected documents confirm the issue arises from lack of input validation/parameter sanitization, enabling ...

CVE-2022-29984

CVE-2022-29984 affects Simple Client Management System 1.0. The vulnerability is a SQL Injection via the parameter in /cms/admin/?page=client/view_client&id=, arising from lack of input validation. Impact per sources ranges from partial confidentiality/integrity/availability to high/critical depe...