CVE-2022-2645

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Garage Management System and classified as problematic. Affected by this vulnerability is an unknown functionality of the file edituser.php. The manipulation of the argument id with the input 1\"><ScRiPt>alert(1)</sCrIpT> leads to cross site scripting. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205573 was assigned to this vulnerability.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 4, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-264506.4In apusys, there is a possible use after free due to a race condition. This could lead to local escalation of privilege with System executioCVE-2022-264516.7In ged, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution pCVE-2022-264526.7In isp, there is a possible use after free due to improper locking. This could lead to local escalation of privilege with System execution pCVE-2022-264536.7In teei, there is a possible memory corruption due to a use after free. This could lead to local escalation of privilege with System executiCVE-2022-264546.7In teei, there is a possible memory corruption due to an integer overflow. This could lead to local escalation of privilege with System execCVE-2022-264556.7In gz, there is a possible memory corruption due to incorrect error handling. This could lead to local escalation of privilege with System eCVE-2022-264564.4In vow, there is a possible information disclosure due to a symbolic link following. This could lead to local information disclosure with SyCVE-2022-264576.7In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-264586.7In vow, there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege with System CVE-2022-264594.4In vow, there is a possible out of bounds read due to an integer overflow. This could lead to local information disclosure with System execuCVE-2022-26466.1A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function oCVE-2022-264606.7In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syst
CVE-2022-2645: Medium severity, CVSS 6.1 | Vulnix