Garage Management System Project Garage Management System
23 CVEs affecting Garage Management System Project Garage Management System. Latest disclosed: 2022-11-29. Critical: 1, High: 9.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2022-36161 | Critical | 9.8 | 2022-07-26 | Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter. |
CVE-2022-36667 | High | 8.8 | 2022-09-14 | Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. The vulnerability exi… |
CVE-2022-36636 | High | 8.8 | 2022-09-02 | Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php. |
CVE-2022-37184 | High | 8.8 | 2022-08-31 | The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload. The already authenticated malicious user, can upload a d… |
CVE-2022-2467 | High | 7.3 | 2022-07-19 | A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /… |
CVE-2022-41551 | High | 7.2 | 2022-11-02 | Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editorder.php. |
CVE-2022-38877 | High | 7.2 | 2022-09-16 | Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1. |
CVE-2022-38610 | High | 7.2 | 2022-09-12 | Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php. |
CVE-2022-38606 | High | 7.2 | 2022-09-12 | Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editcategory.php. |
CVE-2022-36582 | High | 7.2 | 2022-08-31 | An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary co… |
CVE-2022-2672 | Medium | 6.3 | 2022-08-05 | A vulnerability was found in SourceCodester Garage Management System. It has been classified as critical. Affected is an unknown function of the file createUse… |
CVE-2022-2671 | Medium | 6.3 | 2022-08-05 | A vulnerability was found in SourceCodester Garage Management System and classified as critical. This issue affects some unknown processing of the file removeU… |
CVE-2022-2578 | Medium | 6.3 | 2022-07-29 | A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of… |
CVE-2022-2577 | Medium | 6.3 | 2022-07-29 | A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0. This vulnerability affects unknown code of the file /edituser… |
CVE-2022-2468 | Medium | 6.3 | 2022-07-19 | A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical. This issue affects some unknown processing of the file /ed… |
CVE-2022-44279 | Medium | 6.1 | 2022-11-29 | Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php. |
CVE-2022-41358 | Medium | 5.4 | 2022-10-20 | A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payl… |
CVE-2022-36668 | Medium | 5.4 | 2022-09-14 | Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the… |
CVE-2022-36639 | Medium | 5.4 | 2022-09-02 | A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via… |
CVE-2022-36637 | Medium | 5.4 | 2022-09-02 | Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the brand_name parameter at /brand.php. |