Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87032)

Automotive Shop Management System is an automotive shop management system from Carlo Montero’s personal developer. automotive Shop Management System v1.0 is vulnerable to SQL injection, which stems from a lack of validation of external input in its /asms/admin/?page=transactions/manage_transaction&id= component. SQL statement validation. An attacker could use the vulnerability to execute illegal SQL commands to steal sensitive database data.