172 matches found
CVE-2022-3547
CVE-2022-3547 affects SourceCodester Simple Cold Storage Management System 1.0, via the Setting Handler’s /csms/admin/?page=system_info component. Manipulating the System Name/ System Short Name parameters can trigger cross-site scripting (XSS). Exploitation is possible remotely and public PoCs e...
CVE-2022-3547 SourceCodester Simple Cold Storage Management System Setting cross site scripting
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=systeminfo of the component Setting Handler. The manipulation of the argument System Name/System Short Name lead...
CVE-2022-3548 SourceCodester Simple Cold Storage Management System Add New Storage cross site scripting
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Add New Storage Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be...
Simple Cold Storage Management System 跨站脚本漏洞
Simple Cold Storage Management System is a Simple Cold Storage Management System by Carlo Montero Personal Developer. A security vulnerability exists in SourceCodester Simple Cold Storage Management System version 1.0, which stems from an operation on the parameter Name that could lead to a...
CVE-2022-3547 SourceCodester Simple Cold Storage Management System Setting cross site scripting
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been classified as problematic. This affects an unknown part of the file /csms/admin/?page=systeminfo of the component Setting Handler. The manipulation of the argument System Name/System Short Name lead...
CVE-2022-3546
CVE-2022-3546 affects SourceCodester Simple Cold Storage Management System 1.0. A vulnerability exists in the Create User Handler component, specifically the /csms/admin/?page=user/list endpoint, where manipulation of the First Name/Last Name parameters enables cross-site scripting. Attacks can b...
CVE-2022-3548
The CVE-2022-3548 entry covers SourceCodester Simple Cold Storage Management System 1.0, affecting the Add New Storage Handler where manipulating the Name parameter triggers cross-site scripting. Reports indicate remote initiation and public disclosure of exploits. No explicit product version fix...
PT-2022-22866 · Sourcecodester · Simple Cold Storage Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Simple Cold Storage Management System version 1.0 Description: A vulnerability was found in the Avatar Handler component, affecting the file /csms/admin/?page=user/manage user. This issue leads to unrestricted upload and can be...
CVE-2022-42232
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=deletestorage...
CVE-2022-42232
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=deletestorage...
Sql injection
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=deletestorage...
Simple Cold Storage Management System SQL注入漏洞
Sourcecodester Simple Cold Storage Management System is a web-based application used as a cold storage business website to provide their customers or prospects with an easily accessible platform to learn about their company. A security vulnerability exists in Simple Cold Storage Management System...
CVE-2022-42232
Simple Cold Storage Management System v1.0 is affected by an SQL Injection vulnerability in /csms/classes/Master.php?f=delete_storage. The CVE entry documents a high-severity impact (Confidentiality, Integrity, Availability all High) with a CVSS v3.1 base score of 7.2. The exploitation status is ...
CVE-2022-42232
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=deletestorage...
CVE-2022-42230
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=...
CVE-2022-42230
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=...
Sql injection
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=...
Simple Cold Storage Management System SQL注入漏洞
Sourcecodester Simple Cold Storage Management System is a web-based application used as a cold storage business website to provide their customers or prospects with an easily accessible platform to learn about their company. A SQL injection vulnerability exists in Simple Cold Storage Management...
CVE-2022-42230
CVE-2022-42230 affects Simple Cold Storage Management System v1.0. The vulnerability is a SQL Injection in the web API endpoint at /csms/admin/?page=user/manage_user&id= (id parameter), reported across multiple feeds. The advisory data from connected documents indicate a potential PoC exists and ...