Wms

CVEs (3)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	Published	Description
CVE-2021-33949	Feminer wms	Cri	0.64	9.8	0.01	Feb 17, 2023	An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function.
CVE-2020-18106	Wms Project Wms	Cri	0.64	9.8	0.01	Aug 27, 2021	The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
CVE-2020-18544	Wms Project Wms	Cri	0.64	9.8	0.02	Jul 12, 2021	SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".

CVE-2021-33949CriFeb 17, 2023
Feminer
wms
risk 0.64cvss 9.8epss 0.01
An issue in FeMiner WMS v1.1 allows attackers to execute arbitrary code via the filename parameter and the exec function.
CVE-2020-18106CriAug 27, 2021
Wms Project
Wms
risk 0.64cvss 9.8epss 0.01
The GET parameter "id" in WMS v1.0 is passed without filtering, which allows attackers to perform SQL injection.
CVE-2020-18544CriJul 12, 2021
Wms Project
Wms
risk 0.64cvss 9.8epss 0.02
SQL Injection in WMS v1.0 allows remote attackers to execute arbitrary code via the "username" parameter in the component "chkuser.php".