Automotive Shop Management System
by Automotive Shop Management System Project
CVEs (18)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2022-30495 | Cri | 0.64 | 9.8 | 0.01 | May 26, 2022 | In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation) | ||
| CVE-2022-30493 | Cri | 0.64 | 9.8 | 0.02 | May 26, 2022 | In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege escalation). | ||
| CVE-2022-30463 | Hig | 0.57 | 8.8 | 0.01 | May 24, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product. | ||
| CVE-2022-44838 | Hig | 0.47 | 7.2 | 0.01 | Dec 9, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/view_service.php. | ||
| CVE-2022-44860 | Hig | 0.47 | 7.2 | 0.01 | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php. | ||
| CVE-2022-44859 | Hig | 0.47 | 7.2 | 0.01 | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manage_product.php. | ||
| CVE-2022-44858 | Hig | 0.47 | 7.2 | 0.01 | Nov 25, 2022 | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/view_product.php. | ||
| CVE-2022-44820 | Hig | 0.47 | 7.2 | 0.01 | Nov 18, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=. | ||
| CVE-2022-44415 | Hig | 0.47 | 7.2 | 0.01 | Nov 18, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=. | ||
| CVE-2022-44414 | Hig | 0.47 | 7.2 | 0.01 | Nov 18, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=. | ||
| CVE-2022-44413 | Hig | 0.47 | 7.2 | 0.01 | Nov 18, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=. | ||
| CVE-2022-44379 | Hig | 0.47 | 7.2 | 0.01 | Nov 18, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service. | ||
| CVE-2022-44378 | Hig | 0.47 | 7.2 | 0.01 | Nov 18, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic. | ||
| CVE-2022-44403 | Hig | 0.47 | 7.2 | 0.01 | Nov 17, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=. | ||
| CVE-2022-44402 | Hig | 0.47 | 7.2 | 0.01 | Nov 17, 2022 | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction. | ||
| CVE-2022-44280 | Med | 0.42 | 6.5 | 0.01 | Nov 23, 2022 | Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img. | ||
| CVE-2022-30494 | Med | 0.35 | 5.4 | 0.01 | May 26, 2022 | In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs. | ||
| CVE-2022-30458 | Med | 0.35 | 5.4 | 0.01 | May 24, 2022 | Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save_product, name. |
- risk 0.64cvss 9.8epss 0.01
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation)
- risk 0.64cvss 9.8epss 0.02
In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege escalation).
- risk 0.57cvss 8.8epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/view_service.php.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manage_product.php.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/view_product.php.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=.
- risk 0.47cvss 7.2epss 0.01
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction.
- risk 0.42cvss 6.5epss 0.01
Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img.
- risk 0.35cvss 5.4epss 0.01
In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs.
- risk 0.35cvss 5.4epss 0.01
Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save_product, name.