Vulnerabilities

TI-2022-11150 CVE-2022-28412 · GHSA-mp53-rpxh-w4g6

Car Driving School Managment System v1.0 was discovered to contain a SQL injection…

MEDIUM 45

Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=delete_package.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01528 Published 2022-04-21 No fix listed CWE-89

TI-2022-11151 CVE-2022-28413 · GHSA-cjxr-ccf9-frvw

MEDIUM 45

Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Master.php?f=delete_enrollment.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01528 Published 2022-04-21 No fix listed CWE-89

TI-2022-08423 CVE-2022-24572 · GHSA-cqmm-8fxw-w8cq

LOW 28

Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field).

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00641 Published 2022-02-28 No fix listed CWE-79

TI-2022-08422 CVE-2022-24571 · GHSA-vr8h-r7fp-xrw2

MEDIUM 45

Car Driving School Management System v1.0 is affected by SQL injection in the login page.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.01652 Published 2022-02-28 No fix listed CWE-89