CVE-2022-31351

Name of the Vulnerable Software and Affected Versions Online Car Wash Booking System version 1.0

Description The issue concerns a SQL injection vulnerability. It is exploited via the /ocwbs/admin/services/manage price.php?id= API endpoint. The estimated number of potentially affected devices worldwide and details about real-world incidents where this issue was exploited are not specified.

Recommendations For Online Car Wash Booking System version 1.0, as a temporary workaround, consider restricting access to the /ocwbs/admin/services/manage price.php?id= endpoint until a patch is available. Avoid using the id parameter in the affected API endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.