Simple Cold Storage Management System Project Simple Cold Storage Managment System 1.0
Approved changes feed: RSS · Atom
cpe:2.3:a:simple_cold_storage_management_system_project:simple_cold_storage_managment_system:1.0:*:*:*:*:*:*:*
part: a version: 1.0 update: *
| Vendor | Simple Cold Storage Management System Project (51071063-c536-56ea-9f46-a9865753969e) |
|---|---|
| Product | Simple Cold Storage Managment System (9d76d36d-ee05-56ff-985b-d0083d4348da) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2022-43230 |
vulnerable | 2026-06-08 05:49:31.196576 |
Details available
Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/view_details.
Published: 2022-10-28T00:00:00.000Z
Updated: 2025-05-07T14:26:15.474Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-43229 |
vulnerable | 2026-06-08 05:49:31.196125 |
Details available
Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /bookings/update_status.php.
Published: 2022-10-28T00:00:00.000Z
Updated: 2025-05-07T14:32:48.625Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2022-42230 |
vulnerable | 2026-06-08 05:49:29.583041 |
Details available
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manage_user&id=.
Published: 2022-10-11T00:00:00.000Z
Updated: 2025-05-19T20:28:39.810Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2021-45253 |
vulnerable | 2026-06-08 05:36:48.006992 |
Details available
The id parameter in view_storage.php from Simple Cold Storage Management System 1.0 appears to be vulnerable to SQL injection attacks. A payload injects a SQL sub-query that calls MySQL's load_file function with a UNC file path that references a URL on an external domain. The application interacted with that domain, indicating that the injected SQL query was executed.
Published: 2021-12-21T11:23:30.000Z
Updated: 2024-08-04T04:39:20.371Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.