Isic.lk Project Isic.lk
3 CVEs affecting Isic.lk Project Isic.lk. Latest disclosed: 2022-12-01. Critical: 1, High: 2.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-30528 | Critical | 9.8 | 2022-12-01 | SQL Injection vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to execute arbitrary commands via th… |
CVE-2022-28607 | High | 7.5 | 2022-12-01 | An issue was discovered in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to gain sensitive information via the ac… |
CVE-2022-30529 | High | 7.2 | 2022-11-22 | File upload vulnerability in asith-eranga ISIC tour booking through version published on Feb 13th 2018, allows attackers to upload arbitrary files via /system/… |