Vulnerabilities (CVE)

Join the Common Vulnerabilities and Exposures (CVE) community and start to get notified about new vulnerabilities.

Filtered by vendor Revenue Collection System Project Subscribe
Filtered by product Revenue Collection System
Total 3 CVE
CVE Vendors Products Updated CVSS v2 CVSS v3
CVE-2022-46968 1 Revenue Collection System Project 1 Revenue Collection System 2023-02-06 N/A 5.4 MEDIUM
A stored cross-site scripting (XSS) vulnerability in /index.php?page=help of Revenue Collection System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into sent messages.
CVE-2022-46967 1 Revenue Collection System Project 1 Revenue Collection System 2023-02-03 N/A 9.8 CRITICAL
An access control issue in Revenue Collection System v1.0 allows unauthenticated attackers to view the contents of /admin/DBbackup/ directory.
CVE-2022-46966 1 Revenue Collection System Project 1 Revenue Collection System 2023-02-03 N/A 9.8 CRITICAL
Revenue Collection System v1.0 was discovered to contain a SQL injection vulnerability at step1.php.