Dynamic Transaction Queuing System Project vulnerabilities

We track 9 vulnerabilities in Dynamic Transaction Queuing System Project products. 9 are rated high or critical, and none are known to be exploited. The most recent was published on April 5, 2023.

9vulnerabilities

2critical

7high

0exploited

7.8average CVSS score

Latest Dynamic Transaction Queuing System Project vulnerabilities

7.2 High severity
Dynamic Transaction Queuing System: Unrestricted Upload of File with Dangerous Type
CVE-2023-26857Apr 5, 2023Dynamic Transaction Queuing System Project
An arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-26856Apr 5, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login.
9.8 Critical severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46955Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_queue.
9.8 Critical severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46954Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_transaction.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46953Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_window.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46952Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_user.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46951Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_uploads.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46950Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_window.
7.2 High severity
Dynamic Transaction Queuing System: Unrestricted Upload of File with Dangerous Type
CVE-2022-45275Dec 12, 2022Dynamic Transaction Queuing System ProjectEPSS 15.3%
An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.