78 matches found
Cross site scripting
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=systeminfo of the component Setting Handler. The manipulation of the argument System Name/System Short Name lead...
Cross site scripting
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handler. The manipulation of the argument First Name/Last...
CVE-2022-3549
Summary: CVE-2022-3549 affects SourceCodester Simple Cold Storage Management System 1.0, specifically the Avatar Handler in /csms/admin/?page=user/manage_user (or similar path). The issue is an unrestricted file upload vulnerability within the Avatar Handler component, enabling remote attackers t...
CVE-2022-3548: Improper Neutralization
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Add New Storage Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be...
CVE-2022-3549: Incorrect Privilege Assignment
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /csms/admin/?page=user/manageuser of the component Avatar Handler. The manipulation leads to unrestricted upload. The...
CVE-2022-3547
CVE-2022-3547 affects SourceCodester Simple Cold Storage Management System 1.0, via the Setting Handler’s /csms/admin/?page=system_info component. Manipulating the System Name/ System Short Name parameters can trigger cross-site scripting (XSS). Exploitation is possible remotely and public PoCs e...
CVE-2022-3546
CVE-2022-3546 affects SourceCodester Simple Cold Storage Management System 1.0. A vulnerability exists in the Create User Handler component, specifically the /csms/admin/?page=user/list endpoint, where manipulation of the First Name/Last Name parameters enables cross-site scripting. Attacks can b...
CVE-2022-3546: Improper Neutralization
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handler. The manipulation of the argument First Name/Last...
CVE-2022-3547: Improper Neutralization
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=systeminfo of the component Setting Handler. The manipulation of the argument System Name/System Short Name lead...
CVE-2022-3549 SourceCodester Simple Cold Storage Management System Avatar unrestricted upload
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /csms/admin/?page=user/manageuser of the component Avatar Handler. The manipulation leads to unrestricted upload. The...
CVE-2022-3548
The CVE-2022-3548 entry covers SourceCodester Simple Cold Storage Management System 1.0, affecting the Add New Storage Handler where manipulating the Name parameter triggers cross-site scripting. Reports indicate remote initiation and public disclosure of exploits. No explicit product version fix...
CVE-2022-3546 SourceCodester Simple Cold Storage Management System Create User cross site scripting
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file /csms/admin/?page=user/list of the component Create User Handler. The manipulation of the argument First Name/Last...
CVE-2022-42232: Improper Neutralization of Special Elements used in an SQL Command
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=deletestorage...
CVE-2022-42232
Simple Cold Storage Management System v1.0 is affected by an SQL Injection vulnerability in /csms/classes/Master.php?f=delete_storage. The CVE entry documents a high-severity impact (Confidentiality, Integrity, Availability all High) with a CVSS v3.1 base score of 7.2. The exploitation status is ...
PT-2022-26320 · Unknown · Simple Cold Storage Management System
Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL Injection via the /csms/classes/Master.php?f=delete storage endpoint. This allows for potential unauthorized access and manipulation of data. No...
CVE-2022-42230: Improper Neutralization of Special Elements used in an SQL Command
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=...
CVE-2022-42230
CVE-2022-42230 affects Simple Cold Storage Management System v1.0. The vulnerability is a SQL Injection in the web API endpoint at /csms/admin/?page=user/manage_user&id= (id parameter), reported across multiple feeds. The advisory data from connected documents indicate a potential PoC exists and ...
CVE-2022-42230
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=...
