CVE-2022-24571

CVE-2022-24571 involves Car Driving School Management System v1.0, where the login page is vulnerable to SQL injection. The root cause is improper input handling on the username parameter, enabling attackers to alter the SQL query and bypass authentication. This can grant admin access and potenti...

CVE-2022-24572

Car Driving School Management System v1.0 contains a Cross Site Scripting (XSS) vulnerability in the User Enrollment Form Username Field. The weakness allows client‑side code execution when an admin views registered user details. Root cause cited in sources is inadequate input filtering/validatio...

CVE-2022-28412

Car Driving School Management System v1.0 is affected by a SQL injection vulnerability in the file path /cdsms/classes/Master.php?f=delete_package. The CVE-2022-28412 entry and cross-referenced sources (NVD, Red Hat, CNVD/CNNVD, CVE list, etc.) consistently describe a SQLi issue originating from ...

CVE-2022-28413

CVE-2022-28413 affects the Car Driving School Management System v1.0. The vulnerability is a SQL injection in the endpoint /cdsms/classes/Master.php?f=delete_enrollment, caused by lack of filtering/escaping of SQL data in the id parameter. Documented risk indicates potential exposure of sensitive...