PT-2022-23486 · Unknown · Garage Management System

Zerrr0

·

CVE-2022-36582

·

Published

2022-08-31

·

Updated

2022-09-02

CVSS v3.1

7.2

High

VectorAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions Garage Management System version 1.0
Description The issue allows attackers to execute arbitrary code via a crafted PHP file, exploiting an arbitrary file upload vulnerability in the /php action/createProduct.php component.
Recommendations For Garage Management System version 1.0, consider removing or restricting access to the /php action/createProduct.php component until a fix is available, and avoid using this component to upload files from untrusted sources.

Exploit

Fix

Unrestricted File Upload

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-434

Related Identifiers

CVE-2022-36582

Affected Products

Garage Management System