Car Driving School Management System
CVE-2022-24571
CRITICAL
Severity by source
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access.
AnalysisAI
Car Driving School Management System v1.0 is affected by SQL injection in the login page. Rated critical severity (CVSS 9.8), this vulnerability is remotely exploitable, no authentication required, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access. Affected products include: Car Driving School Management System Project Car Driving School Management System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.
Car Driving School Management System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Mas
Car Driving School Managment System v1.0 was discovered to contain a SQL injection vulnerability via /cdsms/classes/Mast
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 6.9),
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 6.9),
Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Usernam
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3),
A vulnerability was found in SourceCodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3),
A vulnerability was found in Sourcecodester Car Driving School Management System 1.0. Rated medium severity (CVSS 5.3),
A vulnerability was found in SourceCodester Car Driving School Management System 1.0 and classified as critical.php. Rat
A vulnerability has been found in SourceCodester Car Driving School Management System 1.0 and classified as critical. Ra
A vulnerability, which was classified as critical, was found in SourceCodester Car Driving School Management System 1.0.
A vulnerability, which was classified as critical, has been found in SourceCodester Car Driving School Management System
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today