Institutional Management Website Project vulnerabilities
We track 2 vulnerabilities in Institutional Management Website Project products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on February 8, 2023.
2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score
Latest Institutional Management Website Project vulnerabilities
- 9.8 Critical severity
Institutional Management Website: Unrestricted Upload of File with Dangerous Type
File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory.
- 9.8 Critical severity
Institutional Management Website: Improper Neutralization of Special Elements used in an SQL Command
SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php.