Vulnerabilities > Oretnom23

DATE CVE VULNERABILITY TITLE RISK
2022-10-17 CVE-2022-3548 Cross-site Scripting vulnerability in Oretnom23 Simple Cold Storage Management System 1.0
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0.
network
low complexity
oretnom23 CWE-79
4.8
2022-10-17 CVE-2022-3549 Unrestricted Upload of File with Dangerous Type vulnerability in Oretnom23 Simple Cold Storage Management System 1.0
A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0.
network
low complexity
oretnom23 CWE-434
7.2
2022-10-14 CVE-2022-42232 SQL Injection vulnerability in Oretnom23 Simple Cold Storage Management System 1.0
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.
network
low complexity
oretnom23 CWE-89
7.2
2022-10-14 CVE-2022-42067 Authorization Bypass Through User-Controlled Key vulnerability in Oretnom23 Online Birth Certificate Management System 1.0
Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability
network
low complexity
oretnom23 CWE-639
4.3
2022-10-14 CVE-2022-42069 Cross-site Scripting vulnerability in Oretnom23 Online Birth Certificate Management System 1.0
Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting (XSS) vulnerability.
network
low complexity
oretnom23 CWE-79
5.4
2022-10-14 CVE-2022-42070 Cross-Site Request Forgery (CSRF) vulnerability in Oretnom23 Online Birth Certificate Management System 1.0
Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF).
network
low complexity
oretnom23 CWE-352
8.8
2022-10-14 CVE-2022-42071 Cross-site Scripting vulnerability in Oretnom23 Online Birth Certificate Management System 1.0
Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability.
network
low complexity
oretnom23 CWE-79
6.1
2022-10-14 CVE-2022-3502 Cross-site Scripting vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability was found in Human Resource Management System 1.0.
network
low complexity
oretnom23 CWE-79
5.4
2022-10-14 CVE-2022-3496 Unspecified vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability was found in SourceCodester Human Resource Management System 1.0 and classified as critical.
network
low complexity
oretnom23
8.8
2022-10-14 CVE-2022-3497 Cross-site Scripting vulnerability in Oretnom23 Human Resource Management System 1.0
A vulnerability was found in SourceCodester Human Resource Management System 1.0.
network
low complexity
oretnom23 CWE-79
5.4