Garage Management System Project

Records23All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high12CVSS 7.0–8.9

Exploited now

Garage Management System Project records in CISA KEV

No Garage Management System Project vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Garage Management System 23 records HIGH

Records

23 records

TI-2022-02278 CVE-2022-2467 · GHSA-m2vc-45rr-qvfm

SourceCodester Garage Management System login.php sql injection

HIGH 81

A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.04863 Published 2022-07-19 No fix listed CWE-89

TI-2022-02380 CVE-2022-2578 · GHSA-73c5-q6c6-4qqm

SourceCodester Garage Management System createUser.php access control

HIGH 75

A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.00732 Published 2022-07-29 No fix listed CWE-284

TI-2022-02379 CVE-2022-2577 · GHSA-c6jv-35x9-7x88

SourceCodester Garage Management System edituser.php sql injection

HIGH 71

A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00706 Published 2022-07-29 No fix listed CWE-89

TI-2022-02279 CVE-2022-2468 · GHSA-cjgm-9qhj-94wr

SourceCodester Garage Management System editbrand.php sql injection

HIGH 71

A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.009 Published 2022-07-19 No fix listed CWE-89

TI-2022-18336 CVE-2022-38877 · GHSA-3v35-mgfm-5cw8

Garage Management System v1.0 is vulnerable to Arbitrary code execution via…

HIGH 67

Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01439 Published 2022-09-16 No fix listed CWE-434

TI-2022-16938 CVE-2022-36667 · GHSA-42gm-5937-wx6g

Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the…

MEDIUM 59

Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.24885 Published 2022-09-14 No fix listed CWE-434

TI-2022-19844 CVE-2022-41358 · GHSA-5r9f-2x9v-8hjh

A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows…

MEDIUM 58

A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the categoriesName parameter in createCateg…

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.04463 Published 2022-10-20 No fix listed CWE-79

TI-2022-16575 CVE-2022-36161 · GHSA-h8hf-xhcx-q243

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

MEDIUM 45

Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01262 Published 2022-07-26 No fix listed CWE-89

TI-2022-17333 CVE-2022-37184 · GHSA-jff7-jw68-rh7r

The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell…

MEDIUM 40

The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01184 Published 2022-08-31 No fix listed CWE-434

TI-2022-16924 CVE-2022-36636 · GHSA-759j-x2f4-6mpp

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via…

MEDIUM 40

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01074 Published 2022-09-02 No fix listed CWE-89

TI-2022-02470 CVE-2022-2672 · GHSA-qrg7-m54p-cr8c

SourceCodester Garage Management System createUser.php sql injection

LOW 39

A vulnerability was found in SourceCodester Garage Management System.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00568 Published 2022-08-05 No fix listed CWE-89

TI-2022-02469 CVE-2022-2671 · GHSA-9936-j8cq-2qpx

SourceCodester Garage Management System removeUser.php sql injection

LOW 39

A vulnerability was found in SourceCodester Garage Management System and classified as critical.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00568 Published 2022-08-05 No fix listed CWE-89

TI-2022-19957 CVE-2022-41551 · GHSA-36h6-cr3x-fx7f

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via…

LOW 36

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editorder.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00975 Published 2022-11-02 No fix listed CWE-89

TI-2022-16891 CVE-2022-36582 · GHSA-jj5v-cvmm-px4f

An arbitrary file upload vulnerability in the component /php_action/createProduct.php of…

LOW 35

An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01442 Published 2022-08-31 No fix listed CWE-434

TI-2022-18164 CVE-2022-38610 · GHSA-q599-m972-jrw9

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via…

LOW 34

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0102 Published 2022-09-12 No fix listed CWE-89

TI-2022-18163 CVE-2022-38606 · GHSA-m5v5-5q5j-7m43

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via…

LOW 34

Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editcategory.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0102 Published 2022-09-12 No fix listed CWE-89

TI-2022-21755 CVE-2022-44279 · GHSA-8j8m-fhx2-23g6

Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php.

LOW 28

Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00599 Published 2022-11-29 No fix listed CWE-79

TI-2022-02446 CVE-2022-2645 · GHSA-pq97-mf94-9w5p

SourceCodester Garage Management System edituser.php cross site scripting

LOW 28

A vulnerability has been found in SourceCodester Garage Management System and classified as problematic.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00476 Published 2022-08-04 No fix listed CWE-79

TI-2022-16926 CVE-2022-36638 · GHSA-hj4x-mq62-43hh

An access control issue in the component print.php of Garage Management System v1.0…

LOW 26

An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.0096 Published 2022-09-02 No fix listed

TI-2022-16939 CVE-2022-36668 · GHSA-g92g-j4pf-frg7

Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on…

LOW 25

Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00623 Published 2022-09-14 No fix listed CWE-79

TI-2022-16927 CVE-2022-36639 · GHSA-fj54-rv3f-xxrq

A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management…

LOW 25

A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00579 Published 2022-09-02 No fix listed CWE-79

TI-2022-16925 CVE-2022-36637 · GHSA-jqcf-rhgj-j4ww

Garage Management System v1.0 was discovered to contain a persistent cross-site scripting…

LOW 25

Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the brand_name parameter at /brand.php.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00579 Published 2022-09-02 No fix listed CWE-79

TI-2022-02381 CVE-2022-2579 · GHSA-xmfx-8h75-67pc

SourceCodester Garage Management System createUser.php cross site scripting

LOW 25

A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00574 Published 2022-07-29 No fix listed CWE-79

Open these records in search →