CVE-2022-42249: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/viewstorage.php?id=...

CVE-2022-42243

CVE-2022-42243 affects Simple Cold Storage Management System v1.0. The vulnerability is an SQL injection in the endpoint /csms/admin/storages/manage_storage.php?id= . Public records from CNVD/CNNVD/Red Hat/CVE feeds describe that a remote attacker can manipulate the database, potentially obtainin...

CVE-2022-42249

CVE-2022-42249 affects Simple Cold Storage Management System v1.0. The vulnerability is a SQL injection in the admin endpoint /csms/admin/storages/view_storage.php?id= (likely due to improper sanitization of the id parameter). This is rated high (CVSS 3.1: base score 7.2) with impact on confident...

CVE-2022-42241: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=deletemessage...

CVE-2022-42250

CVE-2022-42250 affects Simple Cold Storage Management System v1.0. The vulnerability is an SQL injection in /csms/admin/inquiries/view_details.php?id= due to lack of input validation on the id parameter. Descriptions across multiple sources (CNVD/CNNVD/Red Hat and others) indicate potential expos...

PT-2022-26333 · Unknown · Simple Cold Storage Management System

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue is related to SQL injection via the "/csms/admin/storages/view storage.php?id=" endpoint. This allows for potential exploitation. No information is provided about the...

CVE-2022-42241

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection through the endpoint /csms/classes/Master.php?f=delete_message. The vulnerability is documented across multiple sources (CVE, CNVD, Red Hat, CVE.org/Cvelist) with no product version details beyond v1.0 and no official patch...

CVE-2022-42242: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=deletebooking...

CVE-2022-42242

The CVE-2022-42242 entry concerns Simple Cold Storage Management System v1.0 with an SQL injection in the delete_booking path (/csms/classes/Master.php?f=delete_booking). It affects the database query layer and can lead to data exposure, modification, or arbitrary code execution per the public de...

CVE-2022-42243: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/managestorage.php?id=...

CVE-2022-42250: Improper Neutralization of Special Elements used in an SQL Command

Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/viewdetails.php?id=...

Sql injection

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php...

CVE-2021-45435: Improper Neutralization of Special Elements used in an SQL Command

An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php...

CVE-2021-45253

The id parameter in viewstorage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted...

CVE-2021-45253

The CVE-2021-45253 entry concerns Simple Cold Storage Management System 1.0. The vulnerability is in the id parameter of view_storage.php, allowing SQL injection. A payload injected a SQL sub-query invoking MySQL load_file with a UNC path referencing an external URL, and the application interacte...

CVE-2021-45253: Improper Neutralization of Special Elements used in an SQL Command

The id parameter in viewstorage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's loadfile function with a UNC file path that references a URL on an external domain. The application interacted...

PT-2021-24210

Name of the Vulnerable Software and Affected Versions: Simple Cold Storage Management System version 1.0 Description: The issue concerns a SQL injection vulnerability in the id parameter of the view storage.php file. This vulnerability allows an attacker to inject a SQL sub-query that calls MySQL...

Simple Cold Storage Management System 1.0 SQL Injection Vulnerability

Simple Cold Storage Management System version 1.0 suffers from a remote SQL injection vulnerability. Title: Simple Cold Storage Management System 1.0 SQL - Injection Author: nu11secur1ty Vendor: https://www.sourcecodester.com/users/tips23 Software:...