CVE-2022-44413

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/managemechanic.php?id=...

CVE-2022-44379

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteservice...

CVE-2022-44378

Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=deletemechanic...

CVE-2022-44413

Summary: CVE-2022-44413 affects Automotive Shop Management System v1.0. A SQL injection vulnerability exists in the endpoint /asms/admin/mechanics/manage_mechanic.php?id=, stemming from insufficient validation of the id parameter. This can allow an attacker to execute arbitrary SQL commands, pote...

CVE-2022-44820

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/managetransaction&id=...

CVE-2022-44378

Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=deletemechanic...

CVE-2022-44402

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deletetransaction...

CVE-2022-44403

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manageuser&id=...

CVE-2022-44403

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manageuser&id=...

Sql injection

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manageuser&id=...

Sql injection

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deletetransaction...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system from Carlo Montero's personal developer. version v1.0 of Automotive Shop Management System is vulnerable to SQL injection, which originates from /asms/classes/Master.php?f=deletetransaction missing validation of external...

CVE-2022-44402

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deletetransaction...

CVE-2022-44402

The CVE-2022-44402 entry concerns Automotive Shop Management System v1.0 with a SQL Injection vulnerability in the endpoint /asms/classes/Master.php?f=delete_transaction. Multiple sources corroborate that this affects the product version 1.0 and originates from missing input validation, enabling ...

CVE-2022-44403

Automotive Shop Management System v1.0 is affected by a SQL injection via /asms/admin/?page=user/manage_user&id= (unsafely handling the id parameter). The CVE entry identifies the vulnerability as SQLi with high impact on confidentiality, integrity, and availability, with CVSS 3.1 base score 7.2 ...

CVE-2022-44403

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manageuser&id=...

CVE-2022-44403

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manageuser&id=...

CVE-2022-44402

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deletetransaction...

Cloud Security: Buyer Be Critical

Tailoring solutions to challenges It takes a toolbox with different, well, tools to secure an ever-expanding operational perimeter in the cloud. Think about what’s under the general daily purview of cloud security teams: preventing misconfigurations, taming threats and vulnerabilities, and so muc...

Siemens QMS Automotive Information Disclosure Vulnerability

QMS Automotive provides the procedures, processes, structure and resources needed to streamline production and ERP operations while effectively managing quality issues. Siemens QMS Automotive is vulnerable to an information disclosure vulnerability that could be exploited by an attacker to access...