Amssplus Amss++
17 CVEs affecting Amssplus Amss++. Latest disclosed: 2026-02-07. Critical: 1, High: 16.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2024-2599 | Critical | 9.9 | 2024-03-18 | File upload restriction evasion vulnerability in AMSS++ version 4.31. This vulnerability could allow an authenticated user to potentially obtain RCE through we… |
CVE-2024-2592 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/person/pic_show.php, in the 'person_id' parameter. This vulnerability… |
CVE-2024-2591 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_group.php, in multiple parameters. This vulnerabi… |
CVE-2024-2590 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/mail/main/select_send.php, in the 'sd_index' parameter. This vulnerabi… |
CVE-2024-2589 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_school_person.php, in multiple parameters. This v… |
CVE-2024-2588 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/admin/index.php, in the 'id' parameter. This vulnerability could allow a remot… |
CVE-2024-2587 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/bookdetail_khet_person.php, in multiple parameters. This vul… |
CVE-2024-2586 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/index.php, in the 'username' parameter. This vulnerability could allow a remot… |
CVE-2024-2585 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send_2.php, in the 'sd_index' parameter. This vulnera… |
CVE-2024-2584 | High | 8.2 | 2024-03-18 | Vulnerability in AMSS++ version 4.31 that allows SQL injection through /amssplus/modules/book/main/select_send.php, in the 'sd_index' parameter. This vulnerabi… |
CVE-2020-37135 | High | 7.5 | 2026-02-07 | AMSS++ 4.7 contains an authentication bypass vulnerability that allows attackers to access administrative accounts using hardcoded credentials. Attackers can l… |
CVE-2024-2598 | High | 7.1 | 2024-03-18 | Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through… |
CVE-2024-2597 | High | 7.1 | 2024-03-18 | Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through… |
CVE-2024-2596 | High | 7.1 | 2024-03-18 | Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through… |
CVE-2024-2595 | High | 7.1 | 2024-03-18 | Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through… |
CVE-2024-2594 | High | 7.1 | 2024-03-18 | Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through… |
CVE-2024-2593 | High | 7.1 | 2024-03-18 | Vulnerability in AMSS++ version 4.31, which does not sufficiently encode user-controlled input, resulting in a Cross-Site Scripting (XSS) vulnerability through… |