Sql injection

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/updatestatus.php...

Sql injection

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manageproduct.php...

CVE-2022-44859

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manageproduct.php...

CVE-2022-44860

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/updatestatus.php...

CVE-2022-44859

CVE-2022-44859 affects Automotive Shop Management System v1.0, with a SQL injection in /asms/admin/products/manage_product.php via the id parameter. CVSSv3.1 base score 7.2 (HIGH); network attack vector, low complexity, requires high privileges, no user interaction, and results in high impact to ...

CVE-2022-44860

CVE-2022-44860 affects Automotive Shop Management System v1.0, with a SQL injection in the id parameter of /admin/transactions/update_status.php. The root cause is an unsafely constructed SQL query that processes the id value, enabling potential disclosure or tampering per the CVSSv3.1 metrics (A...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system by Carlo Montero Personal Developer. A security vulnerability exists in Automotive Shop Management System v1.0, which was discovered to contain a SQL injection vulnerability via the id parameter in...

CVE-2022-44858

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/viewproduct.php...

CVE-2022-44858

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/viewproduct.php...

CVE-2022-44859

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manageproduct.php...

CVE-2022-44860

Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/updatestatus.php...

CVE-2022-44858

Summary (CVE-2022-44858) : A SQL injection vulnerability exists in Automotive Shop Management System v1.0, exploitable via the id parameter at /asms/products/view_product.php. The issue affects the application’s ability to enforce data confidentiality, integrity, and availability (CVSS v3.1 base ...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system by Carlo Montero Personal Developer. A security vulnerability exists in Automotive Shop Management System v1.0, which was discovered to contain an SQL injection vulnerability via the id parameter in...

CVE-2022-44280

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...

CVE-2022-44280

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...

Design/Logic Flaw

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...

CVE-2022-44280

Automotive Shop Management System v1.0 is affected by an endpoint vulnerability: an attacker can delete arbitrary files via /asms/classes/Master.php?f=delete_img. The connected records confirm the affected product and the exact API parameter, with potential high impact on integrity and availabili...

CVE-2022-44280

Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=deleteimg...

Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87035)

Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the /asms/admin/services/manageservice.php?id= component...

Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87036)

Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of externally entered SQL statements in its...