critical9.8
CVE-2022-30495
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin…
Impact
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation)
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Automotive Shop Management System Project | Automotive Shop Management System | Version 1.0 |