CVE-2024-48245

CVE-2024-48245 Vehicle Management System 1.0 - 1.3 におけるSQLインジェクションの脆弱性 説明 Vehicle Management System 1.0 はSQLインジェクションに対して脆弱です。低権限のゲストユーザーまたは管理アカウントは、複数のエンドポイントの脆弱なPOSTパラメータを悪用して任意のSQLコマンドを実行できます。これにより、許可されていないデータベースアクセス、データ取得、または権限昇格が発生する可能性があります。 影響を受けるパラメータ: 予約ID アクション名 支払確認ID 影響を受けるエンドポイント:...

Transport Management System 1.0 Insecure Direct Object Reference

==================================================================================================================================== | Title : Transport Management System 1.0 idor Vulnerability | | Author : indoushka | | Tested on : windows 10 FrPro / browser : Mozilla firefox 130.0.0 64 bits | |...

CVE-2024-5377

A vulnerability was found in SourceCodester Vehicle Management System 1.0. It has been classified as critical. This affects an unknown part of the file /newvehicle.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

CVE-2024-5377 SourceCodester Vehicle Management System newvehicle.php unrestricted upload

A vulnerability was found in SourceCodester Vehicle Management System 1.0. It has been classified as critical. This affects an unknown part of the file /newvehicle.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

CVE-2024-5377 SourceCodester Vehicle Management System newvehicle.php unrestricted upload

A vulnerability was found in SourceCodester Vehicle Management System 1.0. It has been classified as critical. This affects an unknown part of the file /newvehicle.php. The manipulation of the argument file leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit...

PT-2024-35881 · Sourcecodester · Itsourcecode Vehicle Management System

Name of the Vulnerable Software and Affected Versions: SourceCodester Vehicle Management System version 1.0 Description: A critical issue has been found, affecting an unknown part of the file /newvehicle.php. The manipulation of the file argument leads to unrestricted upload. It is possible to...