1337kid/Piggery_CMS_multiple_vulns_PoC

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-37628 ↗	Jul 12, 2023Wednesday, 12 July 2023, 17:15	9.8 CRITICAL	—
Online Piggery Management System 1.0 is vulnerable to SQL Injection.
CVE-2023-37629 ↗	Jul 12, 2023Wednesday, 12 July 2023, 17:15	9.8 CRITICAL	—
Online Piggery Management System 1.0 is vulnerable to File Upload. An unauthenticated user can upload a php file by sending a POST request to "add-pig.php."
CVE-2023-37630 ↗	Jul 12, 2023Wednesday, 12 July 2023, 17:15	6.1 MEDIUM	—
Online Piggery Management System 1.0 is vulnerable to Cross Site Scripting (XSS). An unauthenticated user can POST JavaScript code to "manage-breed.php" resulting in Persistent XSS.