CVE-2022-44415

Automotive Shop Management System v1.0 is vulnerable to SQL Injection via /asms/admin/mechanics/viewmechanic.php?id=...

PT-2022-27218 · Unknown · Automotive Shop Management System

Name of the Vulnerable Software and Affected Versions: Automotive Shop Management System version 1.0 Description: The issue is related to SQL Injection. It can be exploited via the /asms/admin/mechanics/view mechanic.php endpoint, specifically through the id parameter. Recommendations: For...

Automotive Shop Management System SQL注入漏洞

Automotive Shop Management System is an automotive shop management system by the individual developer Carlo Montero. Automotive Shop Management System v1.0 suffers from a SQL injection vulnerability that stems from a lack of validation of the /asms/admin/mechanics/viewmechanic.php?id= component...