ImaizumiYui/bug_report

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-43319 ↗	Nov 7, 2022Monday, 7 November 2022, 15:15	7.5 HIGH	—
An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learning System v1.0 allows attackers to read arbitrary files.
CVE-2022-43317 ↗	Nov 7, 2022Monday, 7 November 2022, 15:15	6.1 MEDIUM	—
A cross-site scripting (XSS) vulnerability in /hrm/index.php?msg of Human Resource Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload.
CVE-2022-43318 ↗	Nov 7, 2022Monday, 7 November 2022, 15:15	8.8 HIGH	—
Human Resource Management System v1.0 was discovered to contain a SQL injection vulnerability via the stateedit parameter at /hrm/state.php.