The Simple Client Management System Project maintains a narrowly scoped web-based application whose vulnerabilities skew strongly toward critical-severity outcomes. Its durable exposure centers on SQL injection and cross-site scripting flaws, reflecting the input-handling and output-encoding demands of client-facing web applications, and the product tends to acquire public exploit tooling. Current exploitation activity and exposure counts are shown alongside this summary.
The number and severity of CVEs published that impact products developed by Simple Client Management System Project over time
Signals from CVEs in this vendor scope (19 CVEs).
19 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2021-43510CRITICAL SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php. | Feb 1, 2022 | 9.8 | 45 | NO | YES |
CVE-2021-43484CRITICAL A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a req | Mar 31, 2022 | 9.8 | 32 | NO | NO |
CVE-2022-26285CRITICAL Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the | Mar 21, 2022 | 9.8 | 31 | NO | NO |
CVE-2022-29984CRITICAL Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=. | May 12, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-29983CRITICAL Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=. | May 12, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-29981CRITICAL Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete. | May 12, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-29979CRITICAL Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation. | May 12, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-29751CRITICAL Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client. | May 12, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-29750CRITICAL Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service. | May 12, 2022 | 9.8 | 30 | NO | NO |
CVE-2022-29749CRITICAL Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice. | May 12, 2022 | 9.8 | 30 | NO | NO |
Signals from CVEs in this vendor scope (19 CVEs).
An overview of all social media posts that mention a CVE ID that affects a product developed by Simple Client Management System Project.
Media articles that mention a CVE ID that affects a product developed by Simple Client Management System Project — matched by CVE ID, not by vendor name.