ORETNOM23 Toll Tax Management System vulnerabilities

5 CVEs affecting ORETNOM23 Toll Tax Management System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-51032, published 2024-11-08.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-30053, published 2022-05-17. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.
CVE-2023-44047, published 2023-09-27. High severity, CVSS 7.2. EPSS: 0.8% chance of exploitation in the next 30 days. Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection.
CVE-2023-36158, published 2023-08-04. Medium severity, CVSS 6.1. EPSS: 0.8% chance of exploitation in the next 30 days. Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on the My Account page.
CVE-2022-30837, published 2022-05-24. Medium severity, CVSS 5.4. EPSS: 0.6% chance of exploitation in the next 30 days. Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name.
CVE-2024-51032, published 2024-11-08. Medium severity, CVSS 5.4. EPSS: 0.4% chance of exploitation in the next 30 days. A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web scripts via the "owner"…