VulnerabilityModified
CVE-2022-24571
Car Driving School Management System v1.0 is affected by SQL injection in the login page.
CRITICAL 9.8EPSS 1.64%
Does this matter?
High impact if exploited, but EPSS currently rates exploitation as unlikely (1.64%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit.
Description
Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access.
- CVSS 3.1
- 9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- EPSS
- 1.64% probability · 75th percentile
- CISA KEV
- Not listed
- Weakness
- CWE-89
- Affected
- car driving school management system project/car driving school management system
- Source
- cve@mitre.org
References
- https://github.com/nsparker1337/OpenSource/blob/main/exploit_sqlExploit, Third Party Advisory
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24571Exploit, Third Party Advisory
- https://www.nu11secur1ty.com/2022/03/cve-2022-24571.htmlExploit, Third Party Advisory
- https://github.com/nsparker1337/OpenSource/blob/main/exploit_sqlExploit, Third Party Advisory
- https://github.com/nu11secur1ty/CVE-mitre/tree/main/2022/CVE-2022-24571Exploit, Third Party Advisory
- https://www.nu11secur1ty.com/2022/03/cve-2022-24571.htmlExploit, Third Party Advisory
Source: NVD record, EPSS from FIRST.org, KEV from CISA. Refreshed daily.