In oretnom23 Automotive Shop Management System v1.0, the product id parameter suffers from a blind SQL Injection Vulnerability allowing remote attackers to dump all database credential and gain admin access(privilege escalation).
References
Link | Resource |
---|---|
https://github.com/nsparker1337/OpenSource/blob/main/exploit_sql_asms.md | Exploit Third Party Advisory |
Configurations
Configuration 1 (hide)
|
Information
Published : 2022-05-26 10:15
Updated : 2022-06-03 06:21
NVD link : CVE-2022-30493
Mitre link : CVE-2022-30493
JSON object : View
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Products Affected
automotive_shop_management_system_project
- automotive_shop_management_system