medium5.4
CVE-2022-36668
Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters.
Impact
Garage Management System 1.0 is vulnerable to Stored Cross Site Scripting (XSS) on several parameters. The vulnerabilities exist during creating or editing the parts under parameters. Using the XSS payload, the Stored XSS triggered and can be used for further attack vector.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Garage Management System Project | Garage Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md
- https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html
- https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md
- https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html