Vulnerabilities > Oretnom23 > Critical
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-12-03 | CVE-2022-4273 | Unrestricted Upload of File with Dangerous Type vulnerability in Oretnom23 Human Resource Management System 1.0 A vulnerability, which was classified as critical, has been found in SourceCodester Human Resource Management System 1.0. | 9.8 |
| 2022-11-16 | CVE-2022-43262 | SQL Injection vulnerability in Oretnom23 Human Resource Management System 1.0 Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the password parameter at /hrm/controller/login.php. | 9.8 |
| 2022-10-31 | CVE-2022-40471 | Unrestricted Upload of File with Dangerous Type vulnerability in Oretnom23 Clinic'S Patient Management System 1.0 Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php | 9.8 |
| 2022-10-27 | CVE-2022-3714 | SQL Injection vulnerability in Oretnom23 Online Medicine Ordering System 1.0 A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. | 9.8 |
| 2022-10-18 | CVE-2022-3579 | SQL Injection vulnerability in Oretnom23 Cashier Queuing System 1.0 A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. | 9.8 |
| 2022-10-12 | CVE-2022-3458 | Unrestricted Upload of File with Dangerous Type vulnerability in Oretnom23 Human Resource Management System 1.0 A vulnerability has been found in SourceCodester Human Resource Management System 1.0 and classified as critical. | 9.8 |
| 2022-09-05 | CVE-2022-3122 | SQL Injection vulnerability in Oretnom23 Clinic'S Patient Management System 1.0 A vulnerability was found in SourceCodester Clinics Patient Management System 1.0. | 9.8 |
| 2022-09-05 | CVE-2022-3120 | Unspecified vulnerability in Oretnom23 Clinic'S Patient Management System 1.0 A vulnerability classified as critical was found in SourceCodester Clinics Patient Management System. | 9.8 |
| 2022-09-02 | CVE-2022-36609 | SQL Injection vulnerability in Oretnom23 Clinic'S Patient Management System 1.0 Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/update_patient.php. | 9.8 |
| 2022-08-16 | CVE-2022-36242 | SQL Injection vulnerability in Oretnom23 Clinic'S Patient Management System 1.0 Clinic's Patient Management System v1.0 is vulnerable to SQL Injection via /pms/update_medicine.php?id=. | 9.8 |