Dynamic Transaction Queuing System vulnerabilities

9 known vulnerabilities in Dynamic Transaction Queuing System from Dynamic Transaction Queuing System Project. 9 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

9vulnerabilities

2critical

7high

0exploited

7.8average CVSS score

Latest first

7.2 High severity
Dynamic Transaction Queuing System: Unrestricted Upload of File with Dangerous Type
CVE-2023-26857Apr 5, 2023Dynamic Transaction Queuing System Project
An arbitrary file upload vulnerability in /admin/ajax.php?action=save_uploads of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2023-26856Apr 5, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the name parameter at /admin/ajax.php?action=login.
9.8 Critical severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46955Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_queue.
9.8 Critical severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46954Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_transaction.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46953Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=save_window.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46952Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_user.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46951Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_uploads.
7.2 High severity
Dynamic Transaction Queuing System: Improper Neutralization of Special Elements used in an SQL Command
CVE-2022-46950Jan 13, 2023Dynamic Transaction Queuing System Project
Dynamic Transaction Queuing System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/ajax.php?action=delete_window.
7.2 High severity
Dynamic Transaction Queuing System: Unrestricted Upload of File with Dangerous Type
CVE-2022-45275Dec 12, 2022Dynamic Transaction Queuing System ProjectEPSS 15.3%
An arbitrary file upload vulnerability in /queuing/admin/ajax.php?action=save_settings of Dynamic Transaction Queuing System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.