PT-2022-17377 · Unknown · Parking Management System

Published 2022-03-24 · Updated 2022-03-29 · CVE-2022-25575

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Parking Management System version 1.0

Description The issue allows attackers to execute arbitrary web scripts or HTML via crafted payloads injected into the user name, password, and verification code text boxes. This enables the execution of malicious scripts, potentially leading to unauthorized actions.

Recommendations For Parking Management System version 1.0, consider disabling the text boxes for user name, password, and verification code to prevent the injection of crafted payloads until a fix is available. Restrict access to these input fields to minimize the risk of exploitation.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-25575

Affected Products

Parking Management System

References · 4

• 🔥❌ https://github.com/gou-web/Parking-management-systemXSS-/blob/main/README.md · Exploit, Deleted
• https://osv.dev/vulnerability/CVE-2022-25575 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25575 · Security Note
• https://t.me/cibsecurity/39522 · Telegram Post