Intern Record System Project Intern Record System — known CVE vulnerabilities

Every CVE whose affected-product data names Intern Record System Project Intern Record System, ordered by CVSS severity, with EPSS exploit prediction and CISA KEV status.

CVEs (2)

• CVE-2022-40347 — CVSS 9.8 (critical): SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name'…
• CVE-2022-40348 — CVSS 5.4 (medium): Cross Site Scripting (XSS) vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'name' and 'email' parameters…