CVE search
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
Every published CVE plus open-source advisories (NVD, OSV, GitHub), with CVSS, EPSS and whether it is being exploited in the wild (CISA KEV). Updated every few hours. Our scans match these against the technologies they detect.
| 12/05/2022 |
| CVE-2022-29981 | KRITISCH9.8 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete. | 12/05/2022 |
| CVE-2022-29980 | KRITISCH9.8 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=. | 12/05/2022 |
| CVE-2022-29979 | KRITISCH9.8 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation. | 12/05/2022 |
| CVE-2022-29751 | KRITISCH9.8 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client. | 12/05/2022 |
| CVE-2022-29750 | KRITISCH9.8 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service. | 12/05/2022 |
| CVE-2022-29749 | KRITISCH9.8 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice. | 12/05/2022 |
| CVE-2022-29748 | KRITISCH9.8 | Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=. | 12/05/2022 |
| CVE-2022-29747 | KRITISCH9.8 | Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id. | 12/05/2022 |
| CVE-2021-43484 | KRITISCH9.8 | A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request. | 31/03/2022 |
| CVE-2021-43506 | KRITISCH9.8 | An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php. | 31/03/2022 |
| CVE-2021-43505 | MITTEL5.4 | Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via (1) Add new Client and (2) Add new invoice. | 31/03/2022 |
| CVE-2022-26285 | KRITISCH9.8 | Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests. | 21/03/2022 |
| CVE-2022-26284 | KRITISCH9.8 | Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests. | 21/03/2022 |
| CVE-2021-43510 | KRITISCH9.8 | SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php. | 01/02/2022 |
| CVE-2021-43509 | KRITISCH9.8 | SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php. | 01/02/2022 |