Online Car Wash Booking System is an online car wash booking system from Carlo Montero’s personal developer. v1.0 of Online Car Wash Booking System is vulnerable to SQL injection, which originates from /ocwbs/admin/?page=user/ manage_user&id=page lacks validation of external input SQL statements, which can be used by attackers to execute illegal SQL commands to steal sensitive database data.