CVE-2022-36667

{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. The vulnerability exist during adding parts and from the upload function, the attacker can upload PHP Reverse Shell straight away to gain RCE."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-09-14T03:14:22.000Z", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2022-36667", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. The vulnerability exist during adding parts and from the upload function, the attacker can upload PHP Reverse Shell straight away to gain RCE."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html", "refsource": "MISC", "url": "https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html"}, {"name": "https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md", "refsource": "MISC", "url": "https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T10:07:34.524Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-36667", "datePublished": "2022-09-14T03:14:22.000Z", "dateReserved": "2022-07-25T00:00:00.000Z", "dateUpdated": "2024-08-03T10:07:34.524Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"affected": [{"affectedData": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "source": "cve@mitre.org"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:garage_management_system_project:garage_management_system:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "D3922B2E-1825-4D33-B6A7-6C04A3E7842E", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. The vulnerability exist during adding parts and from the upload function, the attacker can upload PHP Reverse Shell straight away to gain RCE."}, {"lang": "es", "value": "Garage Management System versi\u00f3n 1.0, es vulnerable a una Ejecuci\u00f3n de C\u00f3digo Remota (RCE) debido a una falta de filtrado de la funci\u00f3n file upload. La vulnerabilidad se presenta durante la adici\u00f3n de partes y desde la funci\u00f3n de carga, el atacante puede cargar PHP Reverse Shell directamente para ganar RCE"}], "id": "CVE-2022-36667", "lastModified": "2026-06-17T04:53:48.773", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 8.8, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-09-14T11:15:49.723", "references": [{"source": "cve@mitre.org", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md"}, {"source": "cve@mitre.org", "tags": ["Product"], "url": "https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Product"], "url": "https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-434"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}

{}