Tramyardg Autoexpress
4 CVEs affecting Tramyardg Autoexpress. Latest disclosed: 2024-04-19. Critical: 2, High: 1.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-48902 | Critical | 9.8 | 2024-03-21 | An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicle… |
CVE-2023-48901 | Critical | 9.8 | 2024-03-21 | A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the paramet… |
CVE-2024-30974 | High | 7.3 | 2024-04-19 | SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter. |
CVE-2023-48903 | Medium | 6.1 | 2024-03-21 | Stored Cross-Site Scripting (XSS) vulnerability in tramyardg autoexpress 1.3.0, allows remote unauthenticated attackers to inject arbitrary web script or HTML… |