Priority LOW 28
Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00599 · Published 2022-11-29 · No fix listed CWE-79
Priority LOW 36
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editorder.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.00975 · Published 2022-11-02 · No fix listed CWE-89
Priority MEDIUM 58
A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the categoriesName parameter in createCateg…
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.04463 · Published 2022-10-20 · No fix listed CWE-79
Priority HIGH 67
Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01439 · Published 2022-09-16 · No fix listed CWE-434
Priority LOW 25
Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00637 · Published 2022-09-14 · No fix listed CWE-79
Priority MEDIUM 59
Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.24885 · Published 2022-09-14 · No fix listed CWE-434
Priority LOW 34
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editclient.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0102 · Published 2022-09-12 · No fix listed CWE-89
Priority LOW 34
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editcategory.php.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.0102 · Published 2022-09-12 · No fix listed CWE-89
Priority LOW 25
A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the name parameter.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00579 · Published 2022-09-02 · No fix listed CWE-79
Priority LOW 26
An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders.
CVSS 3.1MEDIUM 5.3· Network · No auth · No interaction · EPSS 0.0096 · Published 2022-09-02 · No fix listed
Priority LOW 25
Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability via the brand_name parameter at /brand.php.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00579 · Published 2022-09-02 · No fix listed CWE-79
Priority MEDIUM 40
Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /print.php.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01074 · Published 2022-09-02 · No fix listed CWE-89
Priority LOW 35
An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management System v1.0 allows attackers to execute arbitrary code via a crafted PHP file.
CVSS 3.1HIGH 7.2· Network · High privileges · No interaction · EPSS 0.01442 · Published 2022-08-31 · No fix listed CWE-434
Priority MEDIUM 40
The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.01184 · Published 2022-08-31 · No fix listed CWE-434
Priority LOW 39
A vulnerability was found in SourceCodester Garage Management System.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00568 · Published 2022-08-05 · No fix listed CWE-89
Priority LOW 39
A vulnerability was found in SourceCodester Garage Management System and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00568 · Published 2022-08-05 · No fix listed CWE-89
Priority LOW 28
A vulnerability has been found in SourceCodester Garage Management System and classified as problematic.
CVSS 3.1MEDIUM 6.1· Network · No auth · User interaction · EPSS 0.00476 · Published 2022-08-04 · No fix listed CWE-79
Priority LOW 25
A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0.
CVSS 3.1MEDIUM 5.4· Network · Low privileges · User interaction · EPSS 0.00574 · Published 2022-07-29 · No fix listed CWE-79
Priority HIGH 75
A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.00732 · Published 2022-07-29 · No fix listed CWE-284
Priority HIGH 71
A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.00706 · Published 2022-07-29 · No fix listed CWE-89
Priority MEDIUM 45
Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.01262 · Published 2022-07-26 · No fix listed CWE-89
Priority HIGH 71
A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical.
CVSS 3.1HIGH 8.8· Network · Low privileges · No interaction · EPSS 0.009 · Published 2022-07-19 · No fix listed CWE-89
Priority HIGH 81
A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical.
CVSS 3.1CRITICAL 9.8· Network · No auth · No interaction · EPSS 0.04863 · Published 2022-07-19 · No fix listed CWE-89
THREATIST.IORead the docs