VYPR
← All vendors
Vendor

Amss\+\+ Project

Products
1
CVEs
11
Across products
11
Status
Private

Products

1

Recent CVEs

11
  • CVE-2024-2599CriMar 18, 2024
    AMSS++
    AMSS++
    risk 0.64cvss 9.9epss 0.01

    File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially obtain RCE through webshell, compromising the entire infrastructure.

  • CVE-2024-2592HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.53cvss 8.2epss 0.00

    Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information…

  • CVE-2024-2591HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information…

  • CVE-2024-2590HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information…

  • CVE-2024-2589HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the…

  • CVE-2024-2588HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

  • CVE-2024-2587HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the…

  • CVE-2024-2585HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.53cvss 8.2epss 0.01

    Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the…

  • CVE-2024-2596HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.46cvss 7.1epss 0.00

    Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/mail/main/select_send.php, in multiple parameters. This vulnerability could allow a remote attacker…

  • CVE-2024-2595HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.46cvss 7.1epss 0.00

    Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/modules/book/main/bookdetail_khet_person.php, in the 'b_id' parameter. This vulnerability could allow a…

  • CVE-2024-2594HigMar 18, 2024
    AMSS++
    AMSS++
    risk 0.46cvss 7.1epss 0.00

    Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through /amssplus/admin/index.php, in multiple parameters. This vulnerability could allow a remote attacker to send a…