CVE-2022-36582

概要

参考情報

• zerrr0/Zerrr0_Vulnerability · Exploit

garage management system のその他の脆弱性

• CVE-2022-44279中 6.1Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php.
• CVE-2022-41551高 7.2Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editorder.php.
• CVE-2022-41358中 5.4A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML…
• CVE-2022-38877高 7.2Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.
• CVE-2022-36668中 5.4Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during crea…