PT-2022-19989 · Unknown · Toll Tax Management System

Published 2022-05-17 · Updated 2025-02-24 · CVE-2022-30053

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Toll Tax Management System version 1.0

Description The issue concerns a potential SQL injection attack. Specifically, the id parameter appears to be vulnerable to such attacks.

Recommendations For Toll Tax Management System version 1.0, consider restricting or sanitizing input for the id parameter to prevent SQL injection attacks. As a temporary workaround, avoid using the id parameter in sensitive queries until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-30053

Affected Products

Toll Tax Management System

References · 4

• 🔥 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Toll-Tax-Management-System · Exploit
• https://osv.dev/vulnerability/CVE-2022-30053 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30053 · Security Note
• https://t.me/cvenotify/112244 · Telegram Post