Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-87033
HistoryNov 23, 2022 - 12:00 a.m.

automotive shop management system SQL injection vulnerability (CNVD-2022-87033)

2022-11-2300:00:00
China National Vulnerability Database
www.cnvd.org.cn
17
automotive
shop management
sql injection
vulnerability
validation
input
mechanics
illegal commands
database theft
cnvd-2022-87033

0.001 Low

EPSS

Percentile

38.0%

Automotive Shop Management System is an automotive shop management system from Carlo Montero’s personal developer. automotive Shop Management System v1.0 is vulnerable to SQL injection. The vulnerability stems from a lack of validation of external input SQL statements in its /asms/admin/mechanics/manage_mechanic.php?id= component. An attacker could use this vulnerability to execute illegal SQL commands to steal database data.

0.001 Low

EPSS

Percentile

38.0%

Related for CNVD-2022-87033