Vulnerabilities > Revenue Collection System Project

DATE CVE VULNERABILITY TITLE RISK
2023-01-27 CVE-2022-46968 Cross-site Scripting vulnerability in Revenue Collection System Project Revenue Collection System 1.0
A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages.
network
low complexity
revenue-collection-system-project CWE-79
5.4
2023-01-26 CVE-2022-46966 SQL Injection vulnerability in Revenue Collection System Project Revenue Collection System 1.0
Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.
network
low complexity
revenue-collection-system-project CWE-89
critical
9.8
2023-01-26 CVE-2022-46967 Unspecified vulnerability in Revenue Collection System Project Revenue Collection System 1.0
An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory.
network
low complexity
revenue-collection-system-project
critical
9.8