Simple Cold Storage Management System
Vendor:
First CVE: Jan 28, 2022 · Active for 4 years
13
Total CVEs
More Total CVEs than 92% of tracked products
13.0
Avg CVEs / Year
Higher CVE frequency than 97% of tracked products
6.4
Avg CVSS
Higher Avg CVSS than 31% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Simple Cold Storage Management System over time
Volume of CVEsAvg CVSS Base Score
First CVE
Jan 28, 2022
4 years ago
Most Recent CVE
Oct 18, 2022
1,379 days ago
CVE Severity & Scoring
Simple Cold Storage Management System13 CVEs
31%
54%
All CVEs353,173 CVEs
45%
40%
11%
LowMediumHighCritical
Attack Vector
Local0 (0.0%)
Network13 (100.0%)
Unknown0 (0.0%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low13 (100.0%)
High0 (0.0%)
Unknown0 (0.0%)
User Interaction
None8 (61.5%)
Unknown0 (0.0%)
Required5 (38.5%)
Privileges Required
Low2 (15.4%)
High9 (69.2%)
None2 (15.4%)
Unknown0 (0.0%)
Top CVEs
Signals from CVEs in this product scope (13 CVEs).
13 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-45435CRITICAL An SQL Injection vulnerability exists in Sourcecodester Simple Cold Storage Management System using PHP/OOP 1.0 via the username field in login.php. | Jan 28, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-3549HIGH A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects some unknown processing of the file /csm | Oct 17, 2022 | 7.2 | 24 | NO | NO |
CVE-2022-42232HIGH Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/classes/Master.php?f=delete_storage. | Oct 14, 2022 | 7.2 | 24 | NO | NO |
CVE-2022-42242HIGH Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_booking. | Oct 6, 2022 | 7.2 | 24 | NO | NO |
CVE-2022-42250HIGH Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/inquiries/view_details.php?id=. | Oct 6, 2022 | 7.2 | 23 | NO | NO |
CVE-2022-42249HIGH Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/view_storage.php?id=. | Oct 6, 2022 | 7.2 | 23 | NO | NO |
CVE-2022-42243HIGH Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/manage_storage.php?id=. | Oct 6, 2022 | 7.2 | 23 | NO | NO |
CVE-2022-42241HIGH Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/classes/Master.php?f=delete_message. | Oct 6, 2022 | 7.2 | 23 | NO | NO |
CVE-2022-3587MEDIUM A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionali | Oct 18, 2022 | 5.4 | 20 | NO | NO |
CVE-2022-3548MEDIUM A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component | Oct 17, 2022 | 4.8 | 19 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (13 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (13 CVEs).
Media Mentions
Signals from CVEs in this product scope (13 CVEs).
Top CNAs Publishing CVEs For Simple Cold Storage Management System
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 1.0 | 13 | 6.4 | 0.7% | 0 | 0 |