Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-53347
HistoryJun 09, 2022 - 12:00 a.m.

Online Car Wash Booking System SQL注入漏洞(CNVD-2022-53347)

2022-06-0900:00:00
China National Vulnerability Database
www.cnvd.org.cn
12
car wash booking system
sql injection
carlo montero
validation
exploitation
sensitive database data
vulnerability

EPSS

0.002

Percentile

54.5%

Online Car Wash Booking System is an online car wash booking system by Carlo Montero, a personal developer. Online Car Wash Booking System v1.0 is vulnerable to SQL injection, which originates from /ocwbs/admin/services/ manage_price.php?id=The page lacks validation for external input SQL statements, which can be exploited to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

54.5%

Related for CNVD-2022-53347