automotive shop management system project vulnerabilities

Recent CVEs affecting automotive shop management system project products. 18 tracked.

automotive shop management system project has 18 tracked vulnerabilities, 2 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-12-09. Highest priority: CVE-2022-30493 (score 65/100).

• CVE-2022-44860 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id para
• CVE-2022-44859 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id para
• CVE-2022-44858 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id para
• CVE-2022-44838 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id para
• CVE-2022-44820 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manag
• CVE-2022-44415 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.
• CVE-2022-44414 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.
• CVE-2022-44413 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechani
• CVE-2022-44403 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&i
• CVE-2022-44402 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_tr
• CVE-2022-44379 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_se
• CVE-2022-44378 HIGH 7.2 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic.
• CVE-2022-44280 MEDIUM 6.5 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_
• CVE-2022-30495 CRITICAL 9.8 DOWNGRADE In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Acce
• CVE-2022-30494 MEDIUM 5.4 DOWNGRADE In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored
• CVE-2022-30493 CRITICAL 9.8 DOWNGRADE In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injecti
• CVE-2022-30463 HIGH 8.8 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_pr
• CVE-2022-30458 MEDIUM 5.4 DOWNGRADE Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.ph

FAQ

How do I fix automotive shop management system project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is automotive shop management system project being exploited right now?

None of the tracked automotive shop management system project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which automotive shop management system project CVE should I patch first?

CVE-2022-30493 currently ranks highest (65/100): In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injecti.

Products

• automotive shop management system

RSS feed for automotive shop management system project · ← Back to latest CVEs