ORETNOM23 Simple Cold Storage Management System vulnerabilities

13 CVEs affecting ORETNOM23 Simple Cold Storage Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2022-3587, published 2022-10-18.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2021-45435, published 2022-01-28. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php.
CVE-2022-42232, published 2022-10-14. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage.
CVE-2022-42249, published 2022-10-06. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=.
CVE-2022-42243, published 2022-10-06. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id=.
CVE-2022-42242, published 2022-10-06. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking.
CVE-2022-42241, published 2022-10-06. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message.
CVE-2022-42250, published 2022-10-06. High severity, CVSS 7.2. EPSS: 1% chance of exploitation in the next 30 days. Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=.
CVE-2022-3549, published 2022-10-17. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file…
CVE-2022-3546, published 2022-10-17. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this issue is some unknown functionality of the file…
CVE-2022-3548, published 2022-10-17. Medium severity, CVSS 4.8. EPSS: 0.7% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Add New Storage…

Latest

CVE-2022-3587, published 2022-10-18. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the component…
CVE-2022-3585, published 2022-10-18. Medium severity, CVSS 4.3. EPSS: 0.3% chance of exploitation in the next 30 days. A vulnerability classified as problematic has been found in SourceCodester Simple Cold Storage Management System 1.0. Affected is an unknown function of the file /csms/?page=contact_us of the…
CVE-2022-3582, published 2022-10-18. Low severity, CVSS 3.5. EPSS: 0.4% chance of exploitation in the next 30 days. A vulnerability has been found in SourceCodester Simple Cold Storage Management System 1.0 and classified as problematic. Affected by this vulnerability is an unknown functionality. The manipulation…