ORETNOM23 Online Car Wash Booking System vulnerabilities

13 CVEs affecting ORETNOM23 Online Car Wash Booking System, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2024-5385, published 2024-05-27.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2022-31354, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=get_vehicle_service.
CVE-2022-31353, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/services/view_service.php?id=.
CVE-2022-31352, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 by oretnom23 has SQL injection in /ocwbs/admin/services/manage_service.php?id=.
CVE-2022-31351, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 by oretnom23 has SQL injection via /ocwbs/admin/services/manage_price.php?id=.
CVE-2022-31350, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/vehicles/manage_vehicle.php?id=.
CVE-2022-31348, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/bookings/update_status.php?id=.
CVE-2022-31347, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_vehicle.
CVE-2022-31346, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_service.
CVE-2022-31345, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/admin/?page=user/manage_user&id=.
CVE-2022-31344, published 2022-06-02. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. Online Car Wash Booking System v1.0 is vulnerable to SQL Injection via /ocwbs/classes/Master.php?f=delete_booking.

Latest

CVE-2024-5385, published 2024-05-27. Medium severity, CVSS 4.1. EPSS: 0.5% chance of exploitation in the next 30 days. A vulnerability, which was classified as problematic, has been found in oretnom23 Online Car Wash Booking System 1.0. This issue affects some unknown processing of the file /admin/?page=user/list.…