nsparker1337/OpenSource

Releases0

CVE

CVE History

CVE	Published	CVSS v3	CVSS v2
CVE-2022-29627 ↗	Jun 2, 2022Thursday, 2 June 2022, 14:15	4.3 MEDIUM	4 MEDIUM
An insecure direct object reference (IDOR) in Online Market Place Site v1.0 allows attackers to modify products that are owned by other sellers.
CVE-2022-29628 ↗	Jun 2, 2022Thursday, 2 June 2022, 14:15	5.4 MEDIUM	3.5 LOW
A cross-site scripting (XSS) vulnerability in /omps/seller of Online Market Place Site v1.0 allows attackers to execute arbitrary web cripts or HTML via a crafted payload injected into the Page parameter.
CVE-2022-30493 ↗	May 26, 2022Thursday, 26 May 2022, 17:15	9.8 CRITICAL	10 HIGH
In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege escalation).
CVE-2022-30494 ↗	May 26, 2022Thursday, 26 May 2022, 17:15	5.4 MEDIUM	3.5 LOW
In oretnom23 Automotive Shop Management System v1.0, the first and last name user fields suffer from a stored XSS Injection Vulnerability allowing remote attackers to gain admin access and view internal IPs.
CVE-2022-30495 ↗	May 26, 2022Thursday, 26 May 2022, 17:15	9.8 CRITICAL	7.5 HIGH
In oretnom23 Automotive Shop Management System v1.0, the name id parameter is vulnerable to IDOR - Broken Access Control allowing attackers to change the admin password(vertical privilege escalation)
CVE-2022-24231 ↗	Apr 5, 2022Tuesday, 5 April 2022, 02:15	9.8 CRITICAL	10 HIGH
Simple Student Information System v1.0 was discovered to contain a SQL injection vulnerability via add/Student.
CVE-2022-26615 ↗	Apr 5, 2022Tuesday, 5 April 2022, 02:15	5.4 MEDIUM	3.5 LOW
A cross-site scripting (XSS) vulnerability in College Website Content Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the User Profile Name text fields.
CVE-2022-24571 ↗	Feb 28, 2022Monday, 28 February 2022, 14:15	9.8 CRITICAL	7.5 HIGH
Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access.
CVE-2022-24572 ↗	Feb 28, 2022Monday, 28 February 2022, 14:15	6.1 MEDIUM	4.3 MEDIUM
Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit this Vulnerability, an admin views the registered user details.