PT-2022-26876 · Unknown · Autotaxi Stand Management System

Sanjay Singh · Published 2022-12-06 · Updated 2023-11-14 · CVE-2022-43369

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions AutoTaxi Stand Management System version 1.0

Description The AutoTaxi Stand Management System contains a cross-site scripting (XSS) issue via the search.php component. This allows for potential malicious script injection and execution.

Recommendations For AutoTaxi Stand Management System version 1.0, consider disabling the search.php component until a patch is available to prevent exploitation of the XSS vulnerability.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-43369

Affected Products

Autotaxi Stand Management System

References · 5

• 🔥 https://github.com/sudoninja-noob/CVE-2022-43369/blob/main/CVE-2022-43369 · Exploit
• https://osv.dev/vulnerability/CVE-2022-43369 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-43369 · Security Note
• https://phpgurukul.com/auto-taxi-stand-management-system-using-php-and-mysql · Note
• https://t.me/cibsecurity/54094 · Telegram Post