Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2020-37141

AMSS++ v 4.31 - 'id' SQL Injection

AMSS++ version 4.31 contains a SQL injection vulnerability in the mail module's maildetail.php script through the 'id' parameter. Attackers can manipulate the 'id' parameter in /modules/mail/main/maildetail.php to inject malicious SQL queries and potentially access or modify database contents.

CVSS 4.0 · 8.8 High EPSS < 1% KEV · Not listed
Vendors
Amss++ Project Amss\+\+ Project Amssplus
Products
Amss++ Amss\+\+ Amss Plus
CVE-2020-37135

AMSS++ 4.7 - Backdoor Admin Account

AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can log in with the default admin username and password '1234' to gain unauthorized administrative access to the system.

CVSS 4.0 · 9.3 Critical EPSS < 1% KEV · Not listed
Vendors
Amss++ Project Amss\+\+ Project Amssplus
Products
Amss++ Amss\+\+ Amss Plus
CVE-2024-2589

SQL injection vulnerability in AMSS++

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Amss\+\+ Project Amssplus
Products
Amss\+\+ Amss Plus
CVE-2024-2586

SQL injection vulnerability in AMSS++

Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.

CVSS 3.1 · 8.2 High EPSS < 1% KEV · Not listed
Vendors
Amss\+\+ Project Amssplus
Products
Amss\+\+ Amss Plus