CVE-2022-36638

An access control issue in the component print.php of Garage Management System v1.0 allows unauthenticated attackers to access data for all existing orders.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
5.3 MEDIUM
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 50%
VendorProductVersion
garage_management_system_projectgarage_management_system
1.0
𝑥
= Vulnerable software versions
References
https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0/
https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html
https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0/
https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html