HMS-PHP vulnerabilities

2 known vulnerabilities in HMS-PHP from Pingkon. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  HMS-PHP: Improper Neutralization

  CVE-2022-3973Nov 13, 2022Pingkon

  A vulnerability classified as critical has been found in Pingkon HMS-PHP. Affected is an unknown function of the file /admin/admin.php of the component Data Pump Metadata. The manipulation of the argument uname/pass leads to sql injection. It is possible to la

• 9.8 Critical severity

  HMS-PHP: Improper Neutralization

  CVE-2022-3972Nov 13, 2022Pingkon

  A vulnerability was found in Pingkon HMS-PHP. It has been rated as critical. This issue affects some unknown processing of the file admin/adminlogin.php. The manipulation of the argument uname/pass leads to sql injection. The attack may be initiated remotely.