Automotive Shop Management System SQL Injection Vulnerability (CNVD-2022-87037)

Automotive Shop Management System is an automotive shop management system from Carlo Montero’s personal developer. automotive Shop Management System v1.0 is vulnerable to SQL injection, which originates from /asms/classes/Master.php?f=delete_service component missing validation for external input SQL statements. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.