Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87034)

Automotive Shop Management System is an automotive shop management system from Carlo Montero’s personal developer. automotive Shop Management System v1.0 is vulnerable to SQL injection, which stems from its /asms/admin/mechanics/view_mechanic.php?id= component missing validation for external input SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.