CVE-2022-41358

概要

参考情報

• packetstormsecurity.com/files/168718/Garage-Management-System-1.0-Cross-Site-Scripting.html · Exploit
• cxsecurity.com/issue/WLB-2022100037 · Exploit
• thecasual/CVE-2022-41358 · Exploit
• vulmon.com/vulnerabilitydetails · Third Party Advisory
• samwallace.dev/research/Stored%20XSS%20in%20GMS%201.0 · Exploit
• sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html · Product

garage management system のその他の脆弱性

• CVE-2022-44279中 6.1Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php.
• CVE-2022-41551高 7.2Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editorder.php.
• CVE-2022-38877高 7.2Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.
• CVE-2022-36668中 5.4Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during crea…
• CVE-2022-36667高 8.8Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. Th…