Vulnerabilities

TI-2023-12362 CVE-2023-27666 · GHSA-rqrw-93cv-j23f

Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS)…

LOW 27

Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name parameter at /classes/SystemSettings.php?f=update_settings.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00357 Published 2023-04-14 No fix listed CWE-79

TI-2023-12363 CVE-2023-27667 · GHSA-5g25-mvfp-8cvv

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.

HIGH 76

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.0062 Published 2023-04-13 No fix listed CWE-89

TI-2023-00868 CVE-2023-0916 · GHSA-x4mp-q79c-863h

SourceCodester Auto Dealer Management System Users.php access control

MEDIUM 44

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.03074 Published 2023-02-19 No fix listed CWE-284

TI-2023-00867 CVE-2023-0915 · GHSA-6mv2-r5fw-xvx7

SourceCodester Auto Dealer Management System sql injection

HIGH 71

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01728 Published 2023-02-19 No fix listed CWE-89

TI-2023-00865 CVE-2023-0913 · GHSA-864v-8g4x-h48f

SourceCodester Auto Dealer Management System sql injection

MEDIUM 41

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01635 Published 2023-02-18 No fix listed CWE-89

TI-2023-00864 CVE-2023-0912 · GHSA-3wxg-g674-g9ph

SourceCodester Auto Dealer Management System sql injection

MEDIUM 41

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.01635 Published 2023-02-18 No fix listed CWE-89

Vulnerabilities

Filters

Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS)…

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.

SourceCodester Auto Dealer Management System Users.php access control

SourceCodester Auto Dealer Management System sql injection

SourceCodester Auto Dealer Management System sql injection

SourceCodester Auto Dealer Management System sql injection