Vulnerabilities > Space Management System Project

DATE CVE VULNERABILITY TITLE RISK
2024-07-15 CVE-2024-6743 SQL Injection vulnerability in Space Management System Project Space Management System 202404093302
AguardNet's Space Management System does not properly validate user input, allowing unauthenticated remote attackers to inject arbitrary SQL commands to read, modify, and delete database contents.
network
low complexity
space-management-system-project CWE-89
critical
9.8
2024-07-15 CVE-2024-6742 Cross-site Scripting vulnerability in Space Management System Project Space Management System
AguardNet Technology's Space Management System does not properly filter user input, allowing remote attackers with regular privileges to inject JavaScript and perform Reflected Cross-site scripting attacks.
network
low complexity
space-management-system-project CWE-79
5.4