PHP - CVE CyberSecurity Database News (Page 198)

Nov 18, 2022 Exploit SQL PHP

CVE-2022-44415 - SQL Injection in Automotive Shop Management System v1. (Full Analysis & Exploit Demo)

Automotive Shop Management System (ASMS) v1. is a popular open-source solution for managing automotive service shops. Unfortunately, a severe SQL Injection vulnerability (CVE-2022-44415) was discovered

Nov 18, 2022 WordPress PHP Collne Inc. Welcart e-Commerce (WordPress plugin)

CVE-2022-41840 - Unauthenticated Directory Traversal Vulnerability in Welcart eCommerce <= 2.7.7 for WordPress

--- Introduction A critical vulnerability dubbed CVE-2022-41840 was discovered in the Welcart eCommerce WordPress plugin, affecting all versions up to and including 2.7.7.

Nov 18, 2022 Exploit SQL PHP

CVE-2022-44414 - Exploiting SQL Injection in Automotive Shop Management System v1.

--- Introduction In today’s post, we’re taking a closer look at CVE-2022-44414, which affects the Automotive Shop Management System (ASMS) v1.. This vulnerability

Nov 18, 2022 Exploit SQL PHP

CVE-2022-44379 - Exploiting SQL Injection in Automotive Shop Management System v1.

Automotive Shop Management System (ASMS) v1. is a web-based application used to manage automotive repair shops, handling everything from appointments to inventory. In late 2022,

Nov 18, 2022 Exploit SQL PHP

CVE-2022-44378 - Exploiting SQL Injection in Automotive Shop Management System v1. via /asms/classes/Master.php?f=delete_mechanic

In November 2022, a critical SQL injection vulnerability was discovered in the Automotive Shop Management System v1.. Tracked as CVE-2022-44378, this flaw exists in the