CVE-2022-3546

CVE-2022-3546 affects SourceCodester Simple Cold Storage Management System 1.0. A vulnerability exists in the Create User Handler component, specifically the /csms/admin/?page=user/list endpoint, where manipulation of the First Name/Last Name parameters enables cross-site scripting. Attacks can b...

CVE-2022-3548

The CVE-2022-3548 entry covers SourceCodester Simple Cold Storage Management System 1.0, affecting the Add New Storage Handler where manipulating the Name parameter triggers cross-site scripting. Reports indicate remote initiation and public disclosure of exploits. No explicit product version fix...

PT-2022-26320 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL Injection via the /csms/classes/Master.php?f=delete storage endpoint. This allows for potential unauthorized access and manipulation of data. No...

CVE-2022-42232

Simple Cold Storage Management System v1.0 is affected by an SQL Injection vulnerability in /csms/classes/Master.php?f=delete_storage. The CVE entry documents a high-severity impact (Confidentiality, Integrity, Availability all High) with a CVSS v3.1 base score of 7.2. The exploitation status is ...

CVE-2022-42230

CVE-2022-42230 affects Simple Cold Storage Management System v1.0. The vulnerability is a SQL Injection in the web API endpoint at /csms/admin/?page=user/manage_user&id= (id parameter), reported across multiple feeds. The advisory data from connected documents indicate a potential PoC exists and ...

CVE-2022-42230

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=...

CVE-2022-42241

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=deletemessage...

Sql injection

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=deletemessage...

CVE-2022-42242

The CVE-2022-42242 entry concerns Simple Cold Storage Management System v1.0 with an SQL injection in the delete_booking path (/csms/classes/Master.php?f=delete_booking). It affects the database query layer and can lead to data exposure, modification, or arbitrary code execution per the public de...

CVE-2022-42250

CVE-2022-42250 affects Simple Cold Storage Management System v1.0. The vulnerability is an SQL injection in /csms/admin/inquiries/view_details.php?id= due to lack of input validation on the id parameter. Descriptions across multiple sources (CNVD/CNNVD/Red Hat and others) indicate potential expos...

PT-2022-26333 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL injection via the "/csms/admin/storages/view storage.php?id=" endpoint. This allows for potential exploitation. No information is provided about the...

CVE-2022-42241

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection through the endpoint /csms/classes/Master.php?f=delete_message. The vulnerability is documented across multiple sources (CVE, CNVD, Red Hat, CVE.org/Cvelist) with no product version details beyond v1.0 and no official patch...

CVE-2022-42243

CVE-2022-42243 affects Simple Cold Storage Management System v1.0. The vulnerability is an SQL injection in the endpoint /csms/admin/storages/manage_storage.php?id= . Public records from CNVD/CNNVD/Red Hat/CVE feeds describe that a remote attacker can manipulate the database, potentially obtainin...

CVE-2022-42249

CVE-2022-42249 affects Simple Cold Storage Management System v1.0. The vulnerability is a SQL injection in the admin endpoint /csms/admin/storages/view_storage.php?id= (likely due to improper sanitization of the id parameter). This is rated high (CVSS 3.1: base score 7.2) with impact on confident...

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php...

CVE-2021-45253

The CVE-2021-45253 entry concerns Simple Cold Storage Management System 1.0. The vulnerability is in the id parameter of view_storage.php, allowing SQL injection. A payload injected a SQL sub-query invoking MySQL load_file with a UNC path referencing an external URL, and the application interacte...

CVE-2021-45253

The id parameter in viewstorage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted...

Simple Cold Storage Management System 1.0 SQL Injection Vulnerability

Simple Cold Storage Management System version 1.0 suffers from a remote SQL injection vulnerability. Title: Simple Cold Storage Management System 1.0 SQL - Injection Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software:...