Vulnerabilities > Personal Management System

DATE	CVE	VULNERABILITY TITLE	RISK
2024-07-05	CVE-2024-29318	Cross-site Scripting vulnerability in Personal-Management-System Personal Management System 1.4.64 Volmarg Personal Management System 1.4.64 is vulnerable to stored cross site scripting (XSS) via upload of a SVG file with embedded javascript code. network low complexity personal-management-system CWE-79	5.4
2024-07-05	CVE-2024-29319	Server-Side Request Forgery (SSRF) vulnerability in Personal-Management-System Personal Management System 1.4.64 Volmarg Personal Management System 1.4.64 is vulnerable to SSRF (Server Side Request Forgery) via uploading a SVG file. network low complexity personal-management-system CWE-918 critical	9.8
2023-10-04	CVE-2023-43838	Unrestricted Upload of File with Dangerous Type vulnerability in Personal-Management-System Personal Management System 1.4.64 An arbitrary file upload vulnerability in Personal Management System v1.4.64 allows attackers to execute arbitrary code via uploading a crafted SVG file into a user profile's avatar. local low complexity personal-management-system CWE-434	7.8

Vulnerabilities > Personal Management System {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Vulnerabilities","item":"https://cyber.vumetric.com/vulns/"},{"@type":"ListItem","position":2,"name":"Personal Management System"}]}