garage management system project vulnerabilities

Recent CVEs affecting garage management system project products. 21 tracked.

garage management system project has 21 tracked vulnerabilities, 1 critical. A fixed release or vendor patch exists for 0. Most recent: 2022-11-29. Highest priority: CVE-2022-36161 (score 62/100).

• CVE-2022-44279 MEDIUM 6.1 DOWNGRADE Garage Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /garage/php_action/createBrand.p
• CVE-2022-41358 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute
• CVE-2022-38877 HIGH 7.2 DOWNGRADE Garage Management System v1.0 is vulnerable to Arbitrary code execution via ip/garage/php_action/editProductIm
• CVE-2022-38610 HIGH 7.2 DOWNGRADE Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-38606 HIGH 7.2 DOWNGRADE Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-37184 HIGH 8.8 DOWNGRADE The application manage_website.php on Garage Management System 1.0 is vulnerable to Shell File Upload
• CVE-2022-36668 MEDIUM 5.4 DOWNGRADE Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters
• CVE-2022-36667 HIGH 8.8 DOWNGRADE Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering fro
• CVE-2022-36639 MEDIUM 5.4 DOWNGRADE A stored cross-site scripting (XSS) vulnerability in /client.php of Garage Management System v1.0 allows attac
• CVE-2022-36638 MEDIUM 5.3 DOWNGRADE An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated att
• CVE-2022-36637 MEDIUM 5.4 DOWNGRADE Garage Management System v1.0 was discovered to contain a persistent cross-site scripting (XSS) vulnerability
• CVE-2022-36636 HIGH 8.8 DOWNGRADE Garage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at
• CVE-2022-36582 HIGH 7.2 DOWNGRADE An arbitrary file upload vulnerability in the component /php_action/createProduct.php of Garage Management Sys
• CVE-2022-36161 CRITICAL 9.8 DOWNGRADE Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter.
• CVE-2022-2672 MEDIUM 6.3 MITIGATE A vulnerability was found in SourceCodester Garage Management System
• CVE-2022-2671 MEDIUM 6.3 MITIGATE A vulnerability was found in SourceCodester Garage Management System and classified as critical
• CVE-2022-2579 LOW 3.5 DOWNGRADE A vulnerability, which was classified as problematic, was found in SourceCodester Garage Management System 1.0
• CVE-2022-2578 MEDIUM 6.3 DOWNGRADE A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1
• CVE-2022-2577 MEDIUM 6.3 DOWNGRADE A vulnerability classified as critical was found in SourceCodester Garage Management System 1.0
• CVE-2022-2468 MEDIUM 6.3 DOWNGRADE A vulnerability was found in SourceCodester Garage Management System 1.0 and classified as critical
• CVE-2022-2467 HIGH 7.3 DOWNGRADE A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical

FAQ

How do I fix garage management system project vulnerabilities?

Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.

Is garage management system project being exploited right now?

None of the tracked garage management system project CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.

Which garage management system project CVE should I patch first?

CVE-2022-36161 currently ranks highest (62/100): Orange Station 1.0 was discovered to contain a SQL injection vulnerability via the username parameter..

Products

• garage management system

RSS feed for garage management system project · ← Back to latest CVEs