Institutional Management Website vulnerabilities

2 known vulnerabilities in Institutional Management Website from Institutional Management Website Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Institutional Management Website: Unrestricted Upload of File with Dangerous Type

  CVE-2022-45527Feb 8, 2023Institutional Management Website Project

  File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory.

• 9.8 Critical severity

  Institutional Management Website: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-45526Feb 8, 2023Institutional Management Website ProjectEPSS 1.75%

  SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php.