amss_plus vulnerabilities
9 known vulnerabilities in amss_plus from Amssplus. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
Latest first
- 8.8 High severity
AMSS++: Unrestricted Upload of File with Dangerous Type
File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially obtain RCE through webshell, compromising the entire infrastructure.
- 7.5 High severity
AMSS++: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all th
- 7.5 High severity
AMSS++: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve a
- 7.5 High severity
AMSS++: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve a
- 7.5 High severity
AMSS++: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and re
- 7.5 High severity
AMSS++: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information store
- 7.5 High severity
AMSS++: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information store
- 7.5 High severity
AMSS++: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve
- 7.5 High severity
AMSS++: Improper Neutralization of Special Elements used in an SQL Command
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve a