Filtered by vendor Amssplus Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-2589 2 Amss\+\+ Project, Amssplus 2 Amss\+\+, Amss Plus 2025-04-18 8.2 High
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.
CVE-2024-2586 2 Amss\+\+ Project, Amssplus 2 Amss\+\+, Amss Plus 2025-04-11 8.2 High
Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter. This vulnerability could allow a remote attacker to send a specially crafted SQL query to the server and retrieve all the information stored in the DB.