Simple Client Management System vulnerabilities

2 known vulnerabilities in Simple Client Management System from Simple Client Management System Project. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  Simple Client Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-26285Mar 21, 2022Simple Client Management System ProjectEPSS 2.03%

  Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.

• 9.8 Critical severity

  Simple Client Management System: Improper Neutralization of Special Elements used in an SQL Command

  CVE-2022-26284Mar 21, 2022Simple Client Management System ProjectEPSS 1.98%

  Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.