CVE-2022-36668

Mô tả

Tham khảo

• saitamang/POC-DUMP · Exploit
• sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html · Third Party Advisory

Lỗ hổng khác của garage management system

• CVE-2022-44279TRUNG BÌNH 6.1Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.php.
• CVE-2022-41551CAO 7.2Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /garage/editorder.php.
• CVE-2022-41358TRUNG BÌNH 5.4A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML…
• CVE-2022-38877CAO 7.2Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductImage.php?id=1.
• CVE-2022-36667CAO 8.8Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. Th…