garage management system vulnerabilities and fixes

Recent CVEs affecting garage management system, with upgrade or downgrade steps. 21 tracked.

Also searched as: garagemanagementsystem.

garage management system has 21 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-11-29. Highest priority: CVE-2022-36161 (score 62/100).

CVE-2022-44279 MEDIUM 6.1 DOWNGRADE Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.p
CVE-2022-41358 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute
CVE-2022-38877 HIGH 7.2 DOWNGRADE Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductIm
CVE-2022-38610 HIGH 7.2 DOWNGRADE Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
CVE-2022-38606 HIGH 7.2 DOWNGRADE Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
CVE-2022-37184 HIGH 8.8 DOWNGRADE The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload
CVE-2022-36668 MEDIUM 5.4 DOWNGRADE Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters
CVE-2022-36667 HIGH 8.8 DOWNGRADE Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering fro
CVE-2022-36639 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attac
CVE-2022-36638 MEDIUM 5.3 DOWNGRADE An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated att
CVE-2022-36637 MEDIUM 5.4 DOWNGRADE Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability
CVE-2022-36636 HIGH 8.8 DOWNGRADE Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
CVE-2022-36582 HIGH 7.2 DOWNGRADE An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management Sys
CVE-2022-36161 CRITICAL 9.8 DOWNGRADE Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
CVE-2022-2672 MEDIUM 6.3 MITIGATE A vulnerability was found in SourceCodester Garage Management System
CVE-2022-2671 MEDIUM 6.3 MITIGATE A vulnerability was found in SourceCodester Garage Management System and classified as critical
CVE-2022-2579 LOW 3.5 DOWNGRADE A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0
CVE-2022-2578 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1
CVE-2022-2577 MEDIUM 6.3 DOWNGRADE A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0
CVE-2022-2468 MEDIUM 6.3 DOWNGRADE A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical
CVE-2022-2467 HIGH 7.3 DOWNGRADE A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical

FAQ

How do I fix garage management system vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is garage management system being exploited right now?

None of the tracked garage management system CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which garage management system CVE should I patch first?

CVE-2022-36161 currently ranks highest (62/100): Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter..

RSS feed for garage management system · ← Back to latest CVEs