Buk Ts-G Gas Station Automation System
The system configuration module contains a SQL Injection flaw. A remote attacker can send specially crafted HTTP POST requests to the '/php/request.php' endpoint using the `sql` parameter within application/x-www-form-urlencoded data to execute arbitrary SQL commands. This could lead to unauthorized access to protected information and potentially result in remote code execution.