ctg503/bug_report

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2023-26856 ↗	Apr 5, 2023Wednesday, 5 April 2023, 14:15	7.2 HIGH	—
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login.
CVE-2023-26857 ↗	Apr 5, 2023Wednesday, 5 April 2023, 14:15	7.2 HIGH	—
An arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-43058 ↗	Nov 9, 2022Wednesday, 9 November 2022, 21:15	9.8 CRITICAL	—
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /odlms//classes/Master.php?f=delete_activity.