Sanitization Management System Project

Sanitization Management System

30 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
9.8

CVE-2022-44151

Exploit
  • EPSS 0.17%
  • Veröffentlicht 30.11.2022 17:15:10
  • Zuletzt bearbeitet 06.02.2026 17:16:12

Simple Inventory Management System v1.0 is vulnerable to SQL Injection via /ims/login.php.

9.8

CVE-2022-44096

Exploit
  • EPSS 0.3%
  • Veröffentlicht 30.11.2022 05:15:11
  • Zuletzt bearbeitet 25.04.2025 15:15:32

Sanitization Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

6.1

CVE-2022-45214

Exploit
  • EPSS 0.23%
  • Veröffentlicht 28.11.2022 22:15:10
  • Zuletzt bearbeitet 25.04.2025 20:15:36

A cross-site scripting (XSS) vulnerability in Sanitization Management System v1.0.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the username parameter at /php-sms/classes/Login.php.

7.2

CVE-2022-44278

Exploit
  • EPSS 0.26%
  • Veröffentlicht 23.11.2022 16:15:11
  • Zuletzt bearbeitet 25.04.2025 20:15:34

Sanitization Management System v1.0 is vulnerable to SQL Injection via /php-sms/admin/?page=user/manage_user&id=.

6.1

CVE-2022-3992

  • EPSS 0.21%
  • Veröffentlicht 14.11.2022 17:15:10
  • Zuletzt bearbeitet 21.11.2024 07:20:41

A vulnerability classified as problematic was found in SourceCodester Sanitization Management System. Affected by this vulnerability is an unknown functionality of the file admin/?page=system_info of the component Banner Image Handler. The manipulati...

6.1

CVE-2022-3942

  • EPSS 0.3%
  • Veröffentlicht 11.11.2022 08:15:10
  • Zuletzt bearbeitet 21.11.2024 07:20:34

A vulnerability was found in SourceCodester Sanitization Management System and classified as problematic. This issue affects some unknown processing of the file php-sms/?p=request_quote. The manipulation leads to cross site scripting. The attack may ...

7.2

CVE-2022-43352

Exploit
  • EPSS 0.26%
  • Veröffentlicht 07.11.2022 15:15:11
  • Zuletzt bearbeitet 05.05.2025 19:15:54

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_quote.

6.5

CVE-2022-43351

Exploit
  • EPSS 0.34%
  • Veröffentlicht 07.11.2022 15:15:11
  • Zuletzt bearbeitet 05.05.2025 18:15:39

Sanitization Management System v1.0 was discovered to contain an arbitrary file deletion vulnerability via the component /classes/Master.php?f=delete_img.

7.2

CVE-2022-43350

Exploit
  • EPSS 0.26%
  • Veröffentlicht 07.11.2022 15:15:11
  • Zuletzt bearbeitet 05.05.2025 18:15:39

Sanitization Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /php-sms/classes/Master.php?f=delete_inquiry.

9.8

CVE-2022-3868

  • EPSS 0.25%
  • Veröffentlicht 05.11.2022 09:15:09
  • Zuletzt bearbeitet 21.11.2024 07:20:24

A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an unknown function of the file /php-sms/classes/Master.php?f=save_quote. The manipulation of the argument id leads to sql injection. ...