Lucene search
+L

81 matches found

Prion
Prion
added 2023/04/13 8:15 p.m.22 views

Sql injection

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability...

7.5CVSS9.8AI score0.0062EPSS
SaveExploits0References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/04/13 12:00 a.m.12 views

CVE-2023-27667

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability...

8.4AI score0.0062EPSS
SaveExploits0References3
Cvelist
Cvelist
added 2023/04/13 12:00 a.m.35 views

CVE-2023-27667

Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability...

10AI score0.0062EPSS
SaveExploits0References2
CVE
CVE
added 2023/04/13 12:00 a.m.53 views

CVE-2023-27667

CVE-2023-27667 affects Auto Dealer Management System v1.0 via a SQL injection vulnerability. The attack surface is network-accessible and can lead to confidentiality, integrity, and availability impacts (per CVSS 3.1: 9.8, CRITICAL). Public sources indicate an attacker could exploit SQL injection...

9.8CVSS9.7AI score0.0062EPSS
SaveExploits0References2Affected Software1
CNNVD
CNNVD
added 2023/04/13 12:00 a.m.13 views

Auto Dealer Management System SQL注入漏洞

Auto Dealer Management System is a car dealer management system by Carlo Montero Personal Developer. A security vulnerability exists in Auto Dealer Management System v1.0. An attacker can exploit this vulnerability to perform SQL injection attacks...

9.8CVSS8.7AI score0.0062EPSS
SaveExploits0References4
Positive Technologies
Positive Technologies
added 2023/04/13 12:00 a.m.9 views

PT-2023-21292 · Unknown · Auto Dealer Management System

Name of the Vulnerable Software and Affected Versions: Auto Dealer Management System version 1.0 Description: The issue is related to a SQL injection vulnerability. Recommendations: For Auto Dealer Management System version 1.0, update to a version that includes a fix for the SQL injection...

9.8CVSS9.5AI score0.0062EPSS
SaveExploits0References5
Exploit DB
Exploit DB
added 2023/04/06 12:00 a.m.299 views

Auto Dealer Management System 1.0 - Broken Access Control Exploit

Exploit Title: Auto Dealer Management System 1.0 - Broken Access Control Exploit It leads to compromise of all application accounts by accessing the ?page=user/list with low privileged user account Date: 18 February 2023 CVE Assigned: CVE-2023-0916 mitre.org nvd.nist.org Author: Muhammad Navaid...

8.8CVSS6.8AI score0.03074EPSS
SaveExploits4
OSV
OSV
added 2023/02/19 9:15 a.m.10 views

CVE-2023-0916

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploi...

8.8CVSS6.1AI score0.03074EPSS
SaveExploits4References3
NVD
NVD
added 2023/02/19 9:15 a.m.53 views

CVE-2023-0916

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploi...

8.8CVSS7.2AI score0.03074EPSS
SaveExploits4References3
OSV
OSV
added 2023/02/19 9:15 a.m.12 views

CVE-2023-0915

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manageuser. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

8.8CVSS6.5AI score0.01728EPSS
SaveExploits5References3
NVD
NVD
added 2023/02/19 9:15 a.m.62 views

CVE-2023-0915

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manageuser. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

8.8CVSS7.3AI score0.01728EPSS
SaveExploits5References3
CVE
CVE
added 2023/02/19 8:10 a.m.66 views

CVE-2023-0916

CVE-2023-0916 affects SourceCodester Auto Dealer Management System 1.0, tied to improper access controls in the /adms/classes/Users.php functionality. The vulnerability enables remote exploitation and has public disclosure (exploit DB entry shows “Broken Access Control” leading to compromise of a...

8.8CVSS7.6AI score0.03074EPSS
SaveExploits4References3Affected Software1
Cvelist
Cvelist
added 2023/02/19 8:10 a.m.55 views

CVE-2023-0916 SourceCodester Auto Dealer Management System Users.php access control

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploi...

6.5CVSS9.1AI score0.03074EPSS
SaveExploits4References3
CVE
CVE
added 2023/02/19 8:08 a.m.57 views

CVE-2023-0915

SourceCodester Auto Dealer Management System 1.0 is affected by CVE-2023-0915, a SQL injection in the admin endpoint /adms/admin/?page=user/manage_user caused by manipulating the id parameter. The vulnerability allows remote exploitation and has publicly disclosed exploits. Several connected sour...

8.8CVSS7.7AI score0.01728EPSS
SaveExploits5References3Affected Software1
Vulnrichment
Vulnrichment
added 2023/02/19 8:08 a.m.9 views

CVE-2023-0915 SourceCodester Auto Dealer Management System sql injection

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manageuser. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS7.3AI score0.01728EPSS
SaveExploits5References3
Cvelist
Cvelist
added 2023/02/19 8:08 a.m.54 views

CVE-2023-0915 SourceCodester Auto Dealer Management System sql injection

A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manageuser. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The...

6.5CVSS9.3AI score0.01728EPSS
SaveExploits5References3
CNNVD
CNNVD
added 2023/02/19 12:00 a.m.10 views

Auto Dealer Management System SQL注入漏洞

Auto Dealer Management System is an automobile dealer management system by Carlo Montero Personal Developer. An SQL injection vulnerability exists in Auto Dealer Management System version 1.0, which originates from a problem with an unknown function in the file /adms/admin/?page=user/manageuser,...

8.8CVSS7AI score0.01728EPSS
SaveExploits5References6
CNNVD
CNNVD
added 2023/02/19 12:00 a.m.12 views

Auto Dealer Management System 安全漏洞

Auto Dealer Management System is an automobile dealer management system by Carlo Montero Personal Developer. A security vulnerability exists in Auto Dealer Management System version 1.0, which stems from a problem with an unknown function in the file /adms/classes/Users.php that could lead to...

8.8CVSS6.8AI score0.03074EPSS
SaveExploits4References5
Positive Technologies
Positive Technologies
added 2023/02/19 12:00 a.m.7 views

PT-2023-6681 · Sourcecodester · Sourcecodester Auto Dealer Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Auto Dealer Management System version 1.0 Description: The issue is related to improper access controls in the /adms/classes/Users.php file of the SourceCodester Auto Dealer Management System. This can be exploited by a remote...

9CVSS6.6AI score0.03074EPSS
SaveExploits4References7
NVD
NVD
added 2023/02/18 8:15 p.m.32 views

CVE-2023-0913

A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sellvehicle. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The...

8.8CVSS6.2AI score0.01635EPSS
SaveExploits5References3
Rows per page
Query Builder