CVE-2022-2578

A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /php_action/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-284

• https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Garage%20Management%20System--.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205301Exploit, Third Party Advisory
• https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Garage%20Management%20System--.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205301Exploit, Third Party Advisory

Published

Jul 29, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-25774Prior to the patched version, logged in users of Mautic are …5.4
• CVE-2022-25775Prior to the patched version, logged in users of Mautic are …7.2
• CVE-2022-25776Prior to the patched version, logged in users of Mautic are …6.5
• CVE-2022-25777Prior to the patched version, an authenticated user of Mauti…6.5
• CVE-2022-25778Cross-Site Request Forgery (CSRF) vulnerability in Web UI of…8.8
• CVE-2022-25779Logging of Excessive Data vulnerability in audit log of Seco…4.3
• CVE-2022-25780Information Exposure vulnerability in web UI of Secomea Gate…4.3
• CVE-2022-25781Cross-site Scripting (XSS) vulnerability in Web UI of Secome…6.1
• CVE-2022-25782Improper Handling of Insufficient Privileges vulnerability i…5.4
• CVE-2022-25783Insufficient Logging vulnerability in web server of Secomea …4.3
• CVE-2022-25784Cross-site Scripting (XSS) vulnerability in Web GUI of SiteM…4.8
• CVE-2022-25785Stack-based Buffer Overflow vulnerability in SiteManager all…7.2