Show filters
381 Total Results
Displaying 151-160 of 381
Sort by:
Attacker Value
Unknown

CVE-2024-2592

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-2591

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-2590

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-2589

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-2588

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-2587

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-2586

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-2585

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-2584

Disclosure Date: March 18, 2024 (last updated January 05, 2025)
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
0
Attacker Value
Unknown

CVE-2024-21448

Disclosure Date: March 12, 2024 (last updated January 12, 2025)
Microsoft Teams for Android Information Disclosure Vulnerability