Auto Dealer Management System Project Auto Dealer Management System vulnerabilities

CVE-2023-27666 [MEDIUM] CWE-79 CVE-2023-27666: Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerabil Auto Dealer Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the name parameter at /classes/SystemSettings.php?f=update_settings.

CVE-2023-27667 [CRITICAL] CWE-89 CVE-2023-27667: Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability. Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.

CVE-2023-0916 [HIGH] CWE-284 CVE-2023-0916: A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0 A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /adms/classes/Users.php. The manipulation leads to improper access controls. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The as

CVE-2023-0915 [HIGH] CWE-89 CVE-2023-0915: A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management Syste A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. Affected is an unknown function of the file /adms/admin/?page=user/manage_user. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. V

CVE-2023-0912 [HIGH] CWE-89 CVE-2023-0912: A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management Syste A vulnerability classified as critical has been found in SourceCodester Auto Dealer Management System 1.0. This affects an unknown part of the file /adms/admin/?page=vehicles/view_transaction. The manipulation of the argument id leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be

CVE-2023-0913 [HIGH] CWE-89 CVE-2023-0913: A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0 A vulnerability classified as critical was found in SourceCodester Auto Dealer Management System 1.0. This vulnerability affects unknown code of the file /adms/admin/?page=vehicles/sell_vehicle. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. V