Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

4 records

Vendor: Tramyardg Component: Autoexpress Clear all filters
TI-2023-26676 CVE-2023-48902 · GHSA-gvhp-4r57-55xm

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated…

Priority MEDIUM 51

An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload car images via authentication bypass in uploadC…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01277 Published 2024-03-21 No fix listed CWE-269
TI-2023-26675 CVE-2023-48901 · GHSA-7444-32c7-cjv4

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote…

Priority HIGH 82

A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01031 Published 2024-03-21 No fix listed CWE-89