Back to Database
Status published
Medium
CVE-2022-2578
SourceCodester Garage Management System createUser.php access control
Vulnerability Description
A vulnerability, which was classified as critical, has been found in SourceCodester Garage Management System 1.0. This issue affects some unknown processing of the file /php_action/createUser.php. The manipulation leads to improper access controls. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2578
Credits & Attribution
No credits recorded in the NVD database.
References
More from SourceCodester
View All →CVE-2025-9833
SourceCodester Online Farm Management System login.php sql injection
Medium
6.9
CVE-2025-9832
SourceCodester Food Ordering Management System register-router.php sql injection
Medium
6.9
CVE-2025-9790
SourceCodester Hotel Reservation System updateabout.php sql injection
Medium
6.9
CVE-2025-9789
SourceCodester Online Hotel Reservation System edituser.php sql injection
Medium
6.9
CVE-2025-9788
SourceCodester/Campcodes School Log Management System admin_class.php sql injection
Medium
6.9
Affected Vendor
SourceCodester
View all reports →Affected Software
Garage Management System
Vulnerable Versions:
1.0
Timeline
Official Publish:
July 29th, 2022
Last Modified:
April 15th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L