Vulnerability CVE-2022-24571
Published: 2022-02-28

Description:
Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access.

See advisories in our WLB2 database:
Topic
Author
Date
Med.
Car Driving School Management 1.0 SQL Injection
nu11secur1ty
02.03.2022

Type:

CWE-89

 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection'))

CVSS2 => (AV:N/AC:L/Au:N/C:P/I:P/A:P)

CVSS Base Score
Impact Subscore
Exploitability Subscore
7.5/10
6.4/10
10/10
Exploit range
Attack complexity
Authentication
Remote
Low
No required
Confidentiality impact
Integrity impact
Availability impact
Partial
Partial
Partial
Affected software
Car driving school management system project -> Car driving school management system 

 References:
https://github.com/nsparker1337/OpenSource/blob/main/exploit_sql
https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24571
https://www.nu11secur1ty.com/2022/03/cve-2022-24571.html
Copyright 2024, cxsecurity.com

 

Back to Top