Vulnerabilities

TI-2022-22071 CVE-2022-44838 · GHSA-hw2j-4vj7-9j38

Automotive Shop Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/view_service.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00762 Published 2022-12-09 No fix listed CWE-89

TI-2022-22078 CVE-2022-44860 · GHSA-q8xw-j8hp-4c37

Automotive Shop Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-25 No fix listed CWE-89

TI-2022-22077 CVE-2022-44859 · GHSA-557x-f36f-5p3h

Automotive Shop Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manage_product.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-25 No fix listed CWE-89

TI-2022-22076 CVE-2022-44858 · GHSA-xg75-35c7-jmgx

Automotive Shop Management System v1.0 was discovered to contain a SQL injection…

HIGH 67

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/view_product.php.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00809 Published 2022-11-25 No fix listed CWE-89

TI-2022-21756 CVE-2022-44280 · GHSA-fm8r-8cvr-58v5

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img.

LOW 31

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img.

CVSS 3.1MEDIUM 6.5 Network High privileges No interaction EPSS 0.00881 Published 2022-11-23 No fix listed CWE-22

TI-2022-22068 CVE-2022-44820 · GHSA-67h5-v7cf-4x29

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via…

HIGH 67

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0086 Published 2022-11-18 No fix listed CWE-89

TI-2022-21818 CVE-2022-44415 · GHSA-3pmj-gmhg-h343

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=.

HIGH 67

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00878 Published 2022-11-18 No fix listed CWE-89

TI-2022-21817 CVE-2022-44414 · GHSA-5mhj-6fxj-r2g8

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=.

HIGH 67

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.0086 Published 2022-11-18 No fix listed CWE-89

TI-2022-21816 CVE-2022-44413 · GHSA-679m-qwr5-q5p6

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=.

HIGH 67

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00878 Published 2022-11-18 No fix listed CWE-89

TI-2022-21802 CVE-2022-44379 · GHSA-g2q4-8v44-4qqx

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service.

HIGH 67

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00878 Published 2022-11-18 No fix listed CWE-89

TI-2022-21801 CVE-2022-44378 · GHSA-wxw4-33cp-f7m7

Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic.

HIGH 67

Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.01052 Published 2022-11-18 No fix listed CWE-89

TI-2022-21814 CVE-2022-44403 · GHSA-mcvq-3wcf-625m

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=.

LOW 35

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-17 No fix listed CWE-89

TI-2022-21813 CVE-2022-44402 · GHSA-9xff-9vgf-7mm4

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction.

LOW 35

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction.

CVSS 3.1HIGH 7.2 Network High privileges No interaction EPSS 0.00777 Published 2022-11-17 No fix listed CWE-89

TI-2022-12662 CVE-2022-30495 · GHSA-vw88-9f5h-6px5

In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable…

MEDIUM 44

In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation)

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01186 Published 2022-05-26 No fix listed CWE-639

TI-2022-12660 CVE-2022-30493 · GHSA-2634-g837-vwpm

In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers…

MEDIUM 46

In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege esc…

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02269 Published 2022-05-26 No fix listed CWE-89

TI-2022-12661 CVE-2022-30494 · GHSA-32w3-h3vm-6rj2

In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields…

LOW 25

In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00637 Published 2022-05-26 No fix listed CWE-79

TI-2022-12643 CVE-2022-30463 · GHSA-c447-x4qr-v4cm

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product.

MEDIUM 40

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00985 Published 2022-05-24 No fix listed CWE-89

TI-2022-12638 CVE-2022-30458 · GHSA-4f6x-h2gv-fj5p

Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via…

LOW 25

Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save_product, name.

CVSS 3.1MEDIUM 5.4 Network Low privileges User interaction EPSS 0.00503 Published 2022-05-24 No fix listed CWE-79

Vulnerabilities

Filters