CVE-2022-2802

SourceCodester Gas Agency Management System is affected; the vulnerability exists in gasmark/login.php where manipulating the username parameter triggers a SQL injection. It can be exploited remotely and the exploit has been disclosed publicly. Affected component/file: gasmark/login.php (unknown ...

CVE-2022-2779

CVE-2022-2779 affects SourceCodester Gas Agency Management System. The vulnerability stems from the file /gasmark/assets/myimages/oneWord.php where manipulating the shell parameter enables unrestricted file upload. It can be exploited remotely; exploitation details are not provided in the documen...