81 matches found
Sql injection
Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability...
CVE-2023-27667
Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability...
CVE-2023-27667
Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability...
CVE-2023-27667
CVE-2023-27667 affects Auto Dealer Management System v1.0 via a SQL injection vulnerability. The attack surface is network-accessible and can lead to confidentiality, integrity, and availability impacts (per CVSS 3.1: 9.8, CRITICAL). Public sources indicate an attacker could exploit SQL injection...
Auto Dealer Management System SQL注入漏洞
Auto Dealer Management System is a car dealer management system by Carlo Montero Personal Developer. A security vulnerability exists in Auto Dealer Management System v1.0. An attacker can exploit this vulnerability to perform SQL injection attacks...
PT-2023-21292 · Unknown · Auto Dealer Management System
Name of the Vulnerable Software and Affected Versions: Auto Dealer Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. Recommendations: For Auto Dealer Management System version 1.0, update to a version that includes a fix for the SQL injection...
Auto Dealer Management System 1.0 - Broken Access Control Exploit
Exploit Title: Auto Dealer Management System 1.0 - Broken Access Control Exploit It leads to compromise of all application accounts by accessing the ?page=user/list with low privileged user account Date: 18 February 2023 CVE Assigned: CVE-2023-0916 mitre.org nvd.nist.org Author: Muhammad Navaid...
CVE-2023-0916
A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploi...
CVE-2023-0916
A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploi...
CVE-2023-0915
A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manageuser. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2023-0915
A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manageuser. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2023-0916
CVE-2023-0916 affects SourceCodester Auto Dealer Management System 1.0, tied to improper access controls in the /adms/classes/Users.php functionality. The vulnerability enables remote exploitation and has public disclosure (exploit DB entry shows “Broken Access Control” leading to compromise of a...
CVE-2023-0916 SourceCodester Auto Dealer Management System Users.php access control
A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploi...
CVE-2023-0915
SourceCodester Auto Dealer Management System 1.0 is affected by CVE-2023-0915, a SQL injection in the admin endpoint /adms/admin/?page=user/manage_user caused by manipulating the id parameter. The vulnerability allows remote exploitation and has publicly disclosed exploits. Several connected sour...
CVE-2023-0915 SourceCodester Auto Dealer Management System sql injection
A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manageuser. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
CVE-2023-0915 SourceCodester Auto Dealer Management System sql injection
A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manageuser. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...
Auto Dealer Management System SQL注入漏洞
Auto Dealer Management System is an automobile dealer management system by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Auto Dealer Management System version 1.0, which originates from a problem with an unknown function in the file /adms/admin/?page=user/manageuser,...
Auto Dealer Management System 安全漏洞
Auto Dealer Management System is an automobile dealer management system by Carlo Montero Personal Developer. A security vulnerability exists in Auto Dealer Management System version 1.0, which stems from a problem with an unknown function in the file /adms/classes/Users.php that could lead to...
PT-2023-6681 · Sourcecodester · Sourcecodester Auto Dealer Management System
Name of the Vulnerable Software and Affected Versions: SourceCodester Auto Dealer Management System version 1.0 Description: The issue is related to improper access controls in the /adms/classes/Users.php file of the SourceCodester Auto Dealer Management System. This can be exploited by a remote...
CVE-2023-0913
A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sellvehicle. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...