Known Vulnerabilities for products from Automotive Shop Management System Project
Listed below are 18 of the newest known vulnerabilities associated with the vendor "Automotive Shop Management System Project".
These CVEs are retrieved based on exact matches on listed vendor information (CPE data) as well as a keyword search to ensure the newest vulnerabilities with no officially listed vendor information are still displayed.
Data on known vulnerable products is also displayed based on information from known CPEs, each product links to its respective vulnerability page.
Known Vulnerabilities
| CVE | Shortened Description | Severity | Publish Date | Last Modified |
|---|---|---|---|---|
| CVE-2022-44860 json | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin... | 7.2 - HIGH | 2022-11-25 | 2022-11-28 |
| CVE-2022-44859 json | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/... | 7.2 - HIGH | 2022-11-25 | 2022-11-28 |
| CVE-2022-44858 json | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /asms/... | 7.2 - HIGH | 2022-11-25 | 2022-11-28 |
| CVE-2022-44838 json | Automotive Shop Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /servi... | 7.2 - HIGH | 2022-12-09 | 2022-12-12 |
| CVE-2022-44820 json | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=transactions/manage_transaction&i... | 7.2 - HIGH | 2022-11-18 | 2022-11-20 |
| CVE-2022-44415 json | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/view_mechanic.php?id=. | 7.2 - HIGH | 2022-11-18 | 2022-11-20 |
| CVE-2022-44414 json | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/services/manage_service.php?id=. | 7.2 - HIGH | 2022-11-18 | 2022-11-20 |
| CVE-2022-44413 json | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/manage_mechanic.php?id=. | 7.2 - HIGH | 2022-11-18 | 2022-11-20 |
| CVE-2022-44403 json | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/?page=user/manage_user&id=. | 7.2 - HIGH | 2022-11-17 | 2022-11-18 |
| CVE-2022-44402 json | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_transaction. | 7.2 - HIGH | 2022-11-17 | 2022-11-18 |
| CVE-2022-44379 json | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_service. | 7.2 - HIGH | 2022-11-18 | 2022-11-21 |
| CVE-2022-44378 json | Automotive Shop Management System v1.0 is vulnerable to SQL via /asms/classes/Master.php?f=delete_mechanic. | 7.2 - HIGH | 2022-11-18 | 2022-11-21 |
| CVE-2022-44280 json | Automotive Shop Management System v1.0 is vulnerable to Delete any file via /asms/classes/Master.php?f=delete_img. | 6.5 - MEDIUM | 2022-11-23 | 2023-08-08 |
| CVE-2022-30495 json | In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allo... | 9.8 - CRITICAL | 2022-05-26 | 2022-06-10 |
| CVE-2022-30494 json | In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection V... | 5.4 - MEDIUM | 2022-05-26 | 2022-06-03 |
| CVE-2022-30493 json | In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerabilit... | 9.8 - CRITICAL | 2022-05-26 | 2022-06-03 |
| CVE-2022-30463 json | Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/classes/Master.php?f=delete_product. | 8.8 - HIGH | 2022-05-24 | 2022-05-28 |
| CVE-2022-30458 json | Automotive Shop Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /asms/classes/Master.php?f=save_produc... | 5.4 - MEDIUM | 2022-05-24 | 2022-05-28 |