CVE-2022-44838

概要

参考情報

• GkaMei/bug_report · Exploit

automotive shop management system のその他の脆弱性

• CVE-2022-44860高 7.2Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/u…
• CVE-2022-44859高 7.2Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/…
• CVE-2022-44858高 7.2Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/view_p…
• CVE-2022-44280中 6.5Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img.
• CVE-2022-44820高 7.2Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=.