1038 matches found
CVE-2022-30495
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin passwordvertical privilege escalation...
CVE-2022-30494
In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs...
CVE-2022-30493
In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin accessprivilege escalation...
Cross site scripting
In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs...
Improper access control
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin passwordvertical privilege escalation...
CVE-2022-30495
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin passwordvertical privilege escalation...
CVE-2022-30495
Affected software: oretnom23 Automotive Shop Management System v1.0. The vulnerability is an IDOR / Broken Access Control in the name id parameter that allows vertical privilege escalation to change the admin password. Root cause: improper access control on an identifier parameter. Documented imp...
CVE-2022-30493
CVE-2022-30493 affects oretnom23 Automotive Shop Management System v1.0. The vulnerability is a blind SQL Injection in the product_id parameter that enables remote attackers to dump database credentials and gain admin access (privilege escalation). Impact is described as high/confidentiality, int...
CVE-2022-30493
In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin accessprivilege escalation...
CVE-2022-30494
In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs...
CVE-2022-30494
CVE-2022-30494 affects oretnom23 Automotive Shop Management System v1.0. The vulnerability is a stored XSS in the first/last name user fields that can allow remote attackers to gain admin access and view internal IPs. Several sources (NVD entry, Red Hat advisory, CNVD/CNNVD etc.) corroborate the ...
Automotive Shop Management System 安全漏洞
Automotive Shop Management System is an automotive shop management system. Automotive Shop Management System v1.0 is vulnerable to an access control error that originates from an improper access control error and can be exploited by an attacker to change the administrator password...
Automotive Shop Management System 跨站脚本漏洞
Automotive Shop Management System is an automotive shop management system. Automotive Shop Management System v1.0 is vulnerable to cross-site scripting, which can be exploited by attackers to gain administrator privileges and view internal IPs...
What’s wrong with automotive mobile apps?
Introduction The recent story about the 19-year-old hacker who took control of several dozen Tesla cars has become something of a sensation. We already know that there was an issue with a third-party app that enabled access to data from Teslas. This made it possible for the security researcher to...
Automotive Shop Management System Cross-Site Scripting Vulnerability (CNVD-2022-77486)
Automotive Shop Management System is a system with customer management, vehicle sales, parts sales, repair and maintenance, agency services, auto credit, auto leasing, used car trading, and performance management functions. xss vulnerability exists in Automotive Shop Management System v1.0. An...
Automotive Shop Management System SQL注入漏洞
Automotive Shop Management System is an automotive shop management system. SQL injection vulnerability exists in Automotive Shop Management System v1.0. The vulnerability can be exploited by attackers to conduct SQL injection attacks via /asms/classes/Master.php?f=deleteproduct...
CVE-2022-30463
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteproduct...
CVE-2022-30463
Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=deleteproduct...