PT-2022-20700
CVE-2022-31344
·
تاريخ النشر
2022-06-01
·
تاريخ التحديث
2026-02-18
الوصف من
CVSS 3.1
9.8
حرجةالمقاييسAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Online Car Wash Booking System version 1.0
Description
The issue concerns a SQL Injection vulnerability. It can be exploited via the /ocwbs/classes/Master.php API endpoint, specifically when the
f parameter is set to delete booking.Recommendations
For Online Car Wash Booking System version 1.0, consider restricting access to the
delete booking function in the Master.php file until a patch is available. Avoid using the f parameter in the /ocwbs/classes/Master.php endpoint with the delete booking value to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
الباحثون
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾