CVE's - CVE Vulnerability

CVE

Vendors

Products

Updated

CVSS v2

CVSS v3

CVE-2022-29749

2022-05-19

N/A

9.8 CRITICAL

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.

CVE-2022-29748

2022-05-19

N/A

9.8 CRITICAL

Simple Client Management System 1.0 is vulnerable to SQL Injection via cmsadmin?page=client/manage_client&id=.

CVE-2022-29747

2022-05-19

N/A

9.8 CRITICAL

Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id.

CVE-2022-29746

2022-05-19

N/A

9.8 CRITICAL

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/classes/Users.php?f=delete.

CVE-2022-29745

2022-05-19

N/A

9.8 CRITICAL

Money Transfer Management System 1.0 is vulnerable to SQL Injection via mtmsclassesMaster.php?f=delete_transaction.

CVE-2022-29741

2022-05-19

N/A

9.8 CRITICAL

Money Transfer Management System 1.0 is vulnerable to SQL Injection via mtmsclassesMaster.php?f=delete_fee.

CVE-2022-29739

2022-05-19

N/A

9.8 CRITICAL

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=user/manage_user&id=.

CVE-2022-29738

2022-05-19

N/A

9.8 CRITICAL

Money Transfer Management System 1.0 is vulnerable to SQL Injection via /mtms/admin/?page=transaction/send&id=, id.

CVE-2022-29735

2022-06-10

N/A

8.8 HIGH

Delta Controls enteliTOUCH 3.40.3935, 3.40.3706, and 3.33.4005 allows attackers to execute arbitrary commands via a crafted HTTP request.

CVE-2022-29734

2022-06-09

N/A

5.4 MEDIUM

A cross-site scripting (XSS) vulnerability in ICT Protege GX/WX v2.08 allows authenticated attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the Name parameter.

« Previous 1 … 10,091 10,092 10,093 10,094 10,095 … 11,258 Next »