Simple Client Management System

simple_client_management_system

Vendor: Simple Client Management System Project • 19 CVEs

CVEs (19)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2021-43657 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 Dec 22, 2022 N/A· v4 5.4 MEDIUM· v3 N/A· v2 A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SCMS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fiel...Show more A Stored Cross-site scripting (XSS) vulnerability via MAster.php in Sourcecodetester Simple Client Management System (SCMS) 1.0 allows remote attackers to inject arbitrary web script or HTML via the vulnerable input fields.Show less
CVE-2022-29984 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.
CVE-2022-29983 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/view_invoice&id=.
CVE-2022-29982 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/maintenance/manage_service.php?id=.
CVE-2022-29981 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Users.php?f=delete.
CVE-2022-29980 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=user/manage_user&id=.
CVE-2022-29979 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_designation.
CVE-2022-29751 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_client.
CVE-2022-29750 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_service.
CVE-2022-29749 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/classes/Master.php?f=delete_invoice.
CVE-2022-29748 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via \cms\admin?page=client/manage_client&id=.
CVE-2022-29747 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 May 12, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=invoice/manage_invoice&id= // Leak place ---> id.
CVE-2021-43484 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 Mar 31, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 A Remote Code Execution (RCE) vulnerability exists in Simple Client Management System 1.0 in create.php due to the failure to validate the extension of the file being sent in a request.
CVE-2021-43506 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 Mar 31, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 An SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the password parameter in Login.php.
CVE-2021-43505 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 Mar 31, 2022 N/A· v4 5.4 MEDIUM· v3 3.5 LOW· v2 Multiple Cross Site Scripting (XSS) vulnerabilities exist in Ssourcecodester Simple Client Management System v1 via (1) Add new Client and (2) Add new invoice.
CVE-2022-26285 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 Mar 21, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP...Show more Simple Subscription Website v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the apply endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.Show less
CVE-2022-26284 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 Mar 21, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint. This vulnerability allows attackers to dump the application's database via...Show more Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.Show less
CVE-2021-43510 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 Feb 1, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the username field in login.php.
CVE-2021-43509 1Simple Client Management System Project 1Simple Client Management System Jun 17, 2026 Feb 1, 2022 N/A· v4 9.8 CRITICAL· v3 7.5 HIGH· v2 SQL Injection vulnerability exists in Sourcecodester Simple Client Management System 1.0 via the id parameter in view-service.php.