PT-2022-17261 · Unknown · Auto Spare Parts Management

Published 2022-03-02 · Updated 2022-03-14 · CVE-2022-25398

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Auto Spare Parts Management version 1.0

Description A SQL injection issue was found in Auto Spare Parts Management via the user parameter.

Recommendations For Auto Spare Parts Management version 1.0, consider restricting access to the vulnerable parameter user to minimize the risk of exploitation until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-25398

Affected Products

Auto Spare Parts Management

References · 3

• 🔥 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/pavanpatil45/Auto-Spare-Parts-Management · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-25398 · Security Note
• https://osv.dev/vulnerability/CVE-2022-25398 · Vendor Advisory