CyberSecBulletin

Tramyardg vulnerabilities

We track 2 vulnerabilities in Tramyardg products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on March 21, 2024.

2vulnerabilities
2critical
0high
0exploited
9.8average CVSS score

Latest Tramyardg vulnerabilities

  • 9.8 Critical severity

    autoexpress: Improper Privilege Management

    CVE-2023-48902TramyardgEPSS 1.28%

    An issue was discovered in tramyardg autoexpress version 1.3.0, allows unauthenticated remote attackers to escalate privileges, update car data, delete vehicles, and upload car images via authentication bypass in uploadCarImages.php.

  • 9.8 Critical severity

    autoexpress: Improper Neutralization of Special Elements used in an SQL Command

    CVE-2023-48901TramyardgEPSS 1.03%

    A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php.