PT-2022-23522 · Unknown · Garage Management System

Published 2022-09-02 · Updated 2022-09-08 · CVE-2022-36638

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Garage Management System version 1.0

Description The issue is related to an access control problem in the print.php component, allowing unauthenticated attackers to access data for all existing orders.

Recommendations For Garage Management System version 1.0, consider restricting access to the print.php component until a patch is available. As a temporary workaround, limit the functionality of print.php to authenticated users only to minimize the risk of data exposure.

Exploit

Fix

Related Identifiers

CVE-2022-36638

Affected Products

Garage Management System

References · 4

• 🔥 https://senzee.net/index.php/2022/07/21/vulnerability-of-garage-management-system-1-0 · Exploit
• https://osv.dev/vulnerability/CVE-2022-36638 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-36638 · Security Note
• https://sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html · Note