Vulnerabilities > Oretnom23 > Judging Management System > Critical

DATE CVE VULNERABILITY TITLE RISK
2024-01-12 CVE-2023-30016 SQL Injection vulnerability in Oretnom23 Judging Management System 1.0
SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via sub_event_id parameter in sub_event_details_edit.php.
network
low complexity
oretnom23 CWE-89
critical
9.8
2024-01-12 CVE-2023-30015 SQL Injection vulnerability in Oretnom23 Judging Management System 1.0
SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via txtsearch parameter in review_search.php.
network
low complexity
oretnom23 CWE-89
critical
9.8
2024-01-12 CVE-2023-30014 SQL Injection vulnerability in Oretnom23 Judging Management System 1.0
SQL Injection vulnerability in oretnom23 Judging Management System v1.0, allows remote attackers to execute arbitrary code and obtain sensitive information via sub_event_id parameter in sub_event_stat_update.php.
network
low complexity
oretnom23 CWE-89
critical
9.8