PatchTheCVE: automotive shop management system projecthttps://patchthecve.com/CVEs with upgrade or downgrade fix stepsCVE-2022-44838: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parahttps://patchthecve.com/cve/CVE-2022-44838.htmlhttps://patchthecve.com/cve/CVE-2022-44838.htmlWed, 17 Jun 2026 05:08:58 +0000HIGH 7.2: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /services/view_service.php.CVE-2022-44860: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parahttps://patchthecve.com/cve/CVE-2022-44860.htmlhttps://patchthecve.com/cve/CVE-2022-44860.htmlWed, 17 Jun 2026 05:09:00 +0000HIGH 7.2: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/transactions/update_status.php.CVE-2022-44859: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parahttps://patchthecve.com/cve/CVE-2022-44859.htmlhttps://patchthecve.com/cve/CVE-2022-44859.htmlWed, 17 Jun 2026 05:08:59 +0000HIGH 7.2: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/admin/products/manage_product.php.CVE-2022-44858: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parahttps://patchthecve.com/cve/CVE-2022-44858.htmlhttps://patchthecve.com/cve/CVE-2022-44858.htmlWed, 17 Jun 2026 05:08:59 +0000HIGH 7.2: Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/products/view_product.php.CVE-2022-44280: Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_https://patchthecve.com/cve/CVE-2022-44280.htmlhttps://patchthecve.com/cve/CVE-2022-44280.htmlWed, 17 Jun 2026 05:08:04 +0000MEDIUM 6.5: Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img.CVE-2022-44820: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/managhttps://patchthecve.com/cve/CVE-2022-44820.htmlhttps://patchthecve.com/cve/CVE-2022-44820.htmlWed, 17 Jun 2026 05:08:58 +0000HIGH 7.2: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&id=.CVE-2022-44415: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.https://patchthecve.com/cve/CVE-2022-44415.htmlhttps://patchthecve.com/cve/CVE-2022-44415.htmlWed, 17 Jun 2026 05:08:17 +0000HIGH 7.2: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=.CVE-2022-44414: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.https://patchthecve.com/cve/CVE-2022-44414.htmlhttps://patchthecve.com/cve/CVE-2022-44414.htmlWed, 17 Jun 2026 05:08:17 +0000HIGH 7.2: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=.CVE-2022-44413: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanihttps://patchthecve.com/cve/CVE-2022-44413.htmlhttps://patchthecve.com/cve/CVE-2022-44413.htmlWed, 17 Jun 2026 05:08:17 +0000HIGH 7.2: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=.CVE-2022-44379: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_sehttps://patchthecve.com/cve/CVE-2022-44379.htmlhttps://patchthecve.com/cve/CVE-2022-44379.htmlWed, 17 Jun 2026 05:08:14 +0000HIGH 7.2: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service.CVE-2022-44378: Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic.https://patchthecve.com/cve/CVE-2022-44378.htmlhttps://patchthecve.com/cve/CVE-2022-44378.htmlWed, 17 Jun 2026 05:08:14 +0000HIGH 7.2: Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic.CVE-2022-44403: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&ihttps://patchthecve.com/cve/CVE-2022-44403.htmlhttps://patchthecve.com/cve/CVE-2022-44403.htmlWed, 17 Jun 2026 05:08:17 +0000HIGH 7.2: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=.CVE-2022-44402: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_trhttps://patchthecve.com/cve/CVE-2022-44402.htmlhttps://patchthecve.com/cve/CVE-2022-44402.htmlWed, 17 Jun 2026 05:08:16 +0000HIGH 7.2: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction.CVE-2022-30495: In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Accehttps://patchthecve.com/cve/CVE-2022-30495.htmlhttps://patchthecve.com/cve/CVE-2022-30495.htmlWed, 17 Jun 2026 04:43:43 +0000CRITICAL 9.8: In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation)CVE-2022-30494: In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored https://patchthecve.com/cve/CVE-2022-30494.htmlhttps://patchthecve.com/cve/CVE-2022-30494.htmlWed, 17 Jun 2026 04:43:43 +0000MEDIUM 5.4: In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs.CVE-2022-30493: In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injectihttps://patchthecve.com/cve/CVE-2022-30493.htmlhttps://patchthecve.com/cve/CVE-2022-30493.htmlWed, 17 Jun 2026 04:43:43 +0000CRITICAL 9.8: In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege escalation).CVE-2022-30463: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_prhttps://patchthecve.com/cve/CVE-2022-30463.htmlhttps://patchthecve.com/cve/CVE-2022-30463.htmlWed, 17 Jun 2026 04:43:41 +0000HIGH 8.8: Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product.CVE-2022-30458: Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.phhttps://patchthecve.com/cve/CVE-2022-30458.htmlhttps://patchthecve.com/cve/CVE-2022-30458.htmlWed, 17 Jun 2026 04:43:40 +0000MEDIUM 5.4: Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save_product, name.