TCSWT

3 exploits Active since Feb 2021
CVE-2020-36003 WRITEUP HIGH WRITEUP
Online Book Store 1.0 - SQL Injection via detail.php id Parameter
The id parameter in detail.php of Online Book Store v1.0 is vulnerable to union-based blind SQL injection, which leads to the ability to retrieve all databases.
CVSS 7.5
CVE-2020-36034 WRITEUP CRITICAL WRITEUP
School Faculty Scheduling System 1.0 - SQL Injection via manage_user.php id Parameter
SQL Injection vulnerability in oretnom23 School Faculty Scheduling System version 1.0, allows remote attacker to execute arbitrary code, escalate privilieges, and gain sensitive information via crafted payload to id parameter in manage_user.php.
CVSS 9.8
CVE-2021-25203 WRITEUP CRITICAL WRITEUP
Victor CMS 1.0 - Arbitrary File Upload via admin_add_post.php
Arbitrary file upload vulnerability in Victor CMS v 1.0 allows attackers to execute arbitrary code via the file upload to \CMSsite-master\admin\includes\admin_add_post.php.
CVSS 9.8