1038 matches found
CVE-2022-44378
Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=deletemechanic...
CVE-2022-44379
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteservice...
Code injection
Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=deletemechanic...
Sql injection
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteservice...
CVE-2022-44414
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manageservice.php?id=...
CVE-2022-44379
CVE-2022-44379 affects Automotive Shop Management System v1.0 with a SQL injection flaw in the endpoint "/asms/classes/Master.php?f=delete_service" caused by missing input validation. The vulnerability impacts confidentiality, integrity, and availability (C/I/A) and has a CVSS v3.1 base score of ...
CVE-2022-44820
Automotive Shop Management System v1.0 is affected by a SQL Injection in the admin endpoint /asms/admin/?page=transactions/manage_transaction&id=. The root cause is lack of validation of externally-entered SQL in the id parameter, enabling attackers to manipulate the database and potentially exfi...
CVE-2022-44415
CVE-2022-44415 affects the Automotive Shop Management System v1.0. The vulnerability is a SQL Injection in the endpoint /asms/admin/mechanics/view_mechanic.php?id= due to insufficient input validation. CVSS 3.1 metrics indicate Network attack vector, Low attack complexity, High privileges require...
CVE-2022-44379
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteservice...
PT-2022-27216 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the /asms/admin/mechanics/manage mechanic.php endpoint, specifically through the id parameter. Recommendations: For...
CVE-2022-44820
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/managetransaction&id=...
CVE-2022-44378
The CVE-2022-44378 entry pertains to Automotive Shop Management System v1.0 and describes an SQL injection vulnerability exploitable via /asms/classes/Master.php?f=delete_mechanic. Connected sources consistently identify a lack of input validation in the Master.php endpoint, enabling attackers to...
CVE-2022-44414
CVE-2022-44414 affects Automotive Shop Management System v1.0. The vulnerability is an SQL Injection in the endpoint /asms/admin/services/manage_service.php?id=, arising from insufficient input validation of the id parameter. Multiple sources describe that an attacker can execute arbitrary SQL to...
CVE-2022-44414
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manageservice.php?id=...
CVE-2022-44413
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/managemechanic.php?id=...
PT-2022-27202 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection via the "/asms/classes/Master.php?f=delete service" API endpoint. This allows for potential exploitation. No information is provided about the...
CVE-2022-44415
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/viewmechanic.php?id=...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability. The vulnerability stems from a lack of validation of the...
PT-2022-27318 · Unknown · Automotive Shop Management System
Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue concerns a SQL Injection vulnerability. It can be exploited via the "/asms/admin/?page=transactions/manage transaction&id=" endpoint, specifically through the id variable...