CVE-2022-45527: Unrestricted Upload of File with Dangerous Type

File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...

CVE-2022-45526: Improper Neutralization of Special Elements used in an SQL Command

SQL Injection vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows attackers to execute arbitrary commands via the ad parameter to /adminarea/logintransfer.php...

PT-2023-14689

Name of the Vulnerable Software and Affected Versions Future-Depth Institutional Management Website IMS version 1.0 Description The issue allows attackers to execute arbitrary commands via the ad parameter to "/admin area/login transfer.php" API endpoint. This enables attackers to potentially...

CVE-2022-45527

File upload vulnerability in Future-Depth Institutional Management Website IMS 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory...