Read the docs

Tramyardg

Records4All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

Tramyardg records in CISA KEV

No Tramyardg vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Autoexpress 4 records HIGH

Records

4 records

TI-2023-26675 CVE-2023-48901 · GHSA-7444-32c7-cjv4

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote…

Priority HIGH 82

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01031 Published 2024-03-21 No fix listed CWE-89
TI-2023-26676 CVE-2023-48902 · GHSA-gvhp-4r57-55xm

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated…

Priority MEDIUM 51

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload car images via authentication bypass in uploadC…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01277 Published 2024-03-21 No fix listed CWE-269
Open these records in search →