Description
An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload car images via authentication bypass in uploadCarImages.php.
Critical · 9.8
CVE-2023-48902
EUVD-2023-52930GHSA-gvhp-4r57-55xm
An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car …
Published Mar 21, 2024 · Updated Aug 8, 2024 · Assigned by mitre