MidnightBSD

Advisories for dasinfomedia

CVE-2017-14841 MEDIUM

Mojoomla Annual Maintenance Contract (AMC) Management System allows Arbitrary File Upload in profilesetting image handling.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-434,

Products Affected

Vendor Product Version
dasinfomedia annual_maintenance_contract_management_system -
CVE-2017-14842 MEDIUM

Mojoomla SMSmaster Multipurpose SMS Gateway for WordPress allows SQL Injection via the id parameter.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-89,

Products Affected

Vendor Product Version
dasinfomedia smsmaster_multipurpose_sms_gateway -
CVE-2017-14843 MEDIUM

Mojoomla School Management System for WordPress allows SQL Injection via the id parameter.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-89,

Products Affected

Vendor Product Version
dasinfomedia school_management_system -
CVE-2017-14844 MEDIUM

Mojoomla WPGYM WordPress Gym Management System allows SQL Injection via the id parameter.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-89,

Products Affected

Vendor Product Version
dasinfomedia wpgym_gym_management_system -
CVE-2017-14845 MEDIUM

Mojoomla WPCHURCH Church Management System for WordPress allows SQL Injection via the id parameter.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-89,

Products Affected

Vendor Product Version
dasinfomedia wpchurch_church_management_system -
CVE-2017-14846 MEDIUM

Mojoomla Hospital Management System for WordPress allows SQL Injection via the id parameter.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-89,

Products Affected

Vendor Product Version
dasinfomedia hospital_management_system -
CVE-2017-14847 MEDIUM

Mojoomla WPAMS Apartment Management System for WordPress allows SQL Injection via the id parameter.

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-89,

Products Affected

Vendor Product Version
dasinfomedia wpams_apartment_management_system -
CVE-2017-14848 MEDIUM

WPHRM Human Resource Management System for WordPress 1.0 allows SQL Injection via the employee_id parameter.

CVSS 3.x

Source Score Severity Vector Exploitability Impact
nvd@nist.gov 8.8 HIGH CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H 2.8 5.9

CVSS 2.0

Severity: MEDIUM

Problem Type: CWE-89,

Products Affected

Vendor Product Version
dasinfomedia wphrm_human_resource_management_system 1.0