via-labs/bug_report

Releases0

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-41512 ↗	Oct 7, 2022Friday, 7 October 2022, 18:15	7.2 HIGH	—
An arbitrary file upload vulnerability in the component /php_action/editFile.php of Online Diagnostic Lab Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVE-2022-41513 ↗	Oct 7, 2022Friday, 7 October 2022, 18:15	7.2 HIGH	—
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /diagnostic/edittest.php.
CVE-2022-41514 ↗	Oct 7, 2022Friday, 7 October 2022, 18:15	7.2 HIGH	—
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_loan.
CVE-2022-41515 ↗	Oct 7, 2022Friday, 7 October 2022, 18:15	7.2 HIGH	—
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_payment.