CVE-2022-24571

Опубликовано: 28 фев. 2022

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access.

Ссылки

https://github.com/nsparker1337/OpenSource/blob/main/exploit_sql
Exploit
Third Party Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24571
Exploit
Third Party Advisory
https://www.nu11secur1ty.com/2022/03/cve-2022-24571.html
Exploit
Third Party Advisory
https://github.com/nsparker1337/OpenSource/blob/main/exploit_sql
Exploit
Third Party Advisory
https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24571
Exploit
Third Party Advisory
https://www.nu11secur1ty.com/2022/03/cve-2022-24571.html
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:car_driving_school_management_system_project:car_driving_school_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 65%

0.00484

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-89

Связанные уязвимости

GHSA-vr8h-r7fp-xrw2