itsourcecode Alton Management System 1.0 is vulnerable to SQL Injection in /noncombo_save.php via the "menu" parameter.
Product
itsourcecode Alton Management System vulnerabilities
8 published CVES affecting itsourcecode Alton Management System, from public sources (CVE.org, NVD, CISA KEV, FIRST EPSS, OSV).
- Total
- 8
- Critical
- 0
- High
- 1
- Medium
- 7
- Low
- 0
- Unscored
- 0
- CISA KEV
- 0
Latest itsourcecode Alton Management System CVEs
Newest publication first
-
HighCVSS 8.8 EPSS 0.54%
-
CVE-2024-7445 itsourcecode Ticket Reservation System checkout_ticket_save.php sql injection
PublishedMediumCVSS 5.1 EPSS 0.57%A vulnerability, which was classified as critical, has been found in itsourcecode Ticket Reservation System 1.0. Affected by this issue is some unknown functionality of the file checkout_ticket_save.php. The manipulation of the argument data leads to sql injection. The attack may...
-
MediumCVSS 5.1 EPSS 0.46%
A vulnerability was found in itsourcecode Alton Management System 1.0. It has been classified as critical. This affects an unknown part of the file /admin/team_save.php. The manipulation of the argument team leads to sql injection. It is possible to initiate the attack remotely....
-
CVE-2024-7277 itsourcecode Alton Management System Add a Menu menu.php unrestricted upload
PublishedMediumCVSS 5.1 EPSS 0.54%A vulnerability was found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this issue is some unknown functionality of the file /admin/menu.php of the component Add a Menu. The manipulation of the argument image leads to unrestricted upload. The...
-
MediumCVSS 5.1 EPSS 0.60%
A vulnerability has been found in itsourcecode Alton Management System 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /admin/member_save.php. The manipulation of the argument last/first leads to sql injection. The attack can...
-
MediumCVSS 5.1 EPSS 0.60%
A vulnerability, which was classified as critical, was found in itsourcecode Alton Management System 1.0. Affected is an unknown function of the file /admin/category_save.php. The manipulation of the argument category leads to sql injection. It is possible to launch the attack re...
-
MediumCVSS 5.1 EPSS 0.65%
A vulnerability, which was classified as critical, has been found in itsourcecode Alton Management System 1.0. This issue affects some unknown processing of the file /reservation_status.php. The manipulation of the argument rcode leads to sql injection. The attack may be initiate...
-
MediumCVSS 5.3 EPSS 0.65%
A vulnerability classified as critical was found in itsourcecode Alton Management System 1.0. This vulnerability affects unknown code of the file search.php. The manipulation of the argument rcode leads to sql injection. The attack can be initiated remotely. The exploit has been...
Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.