PT-2025-25542 · Unknown · Parking Management System

Sechzredo · Published 2025-06-16 · Updated 2025-06-21 · CVE-2025-6117

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Das Parking Management System version 6.2.0

Description A critical issue was found in the API component of the system, specifically affecting the /Reservations/Search file. The manipulation of the Value argument leads to SQL injection. This issue can be exploited remotely.

Recommendations For version 6.2.0, as a temporary workaround, consider restricting access to the /Reservations/Search API endpoint until a patch is available. Avoid using the Value argument in this endpoint to minimize the risk of exploitation.

Exploit

Fix

Special Elements Injection

SQL injection

Weakness Enumeration

CWE-74

CWE-89

Related Identifiers

CVE-2025-6117

Affected Products

Parking Management System

References · 11

• 🔥 https://github.com/K-mxredo/MXdocument/blob/K-mxredo-blob/%E5%81%9C%E8%BD%A6%E5%9C%BA%E7%B3%BB%E7%BB%9FReservations-Search.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2025-6117 · Security Note
• https://osv.dev/vulnerability/CVE-2025-6117 · Vendor Advisory
• https://t.me/cvenotify/125760 · Telegram Post
• https://vuldb.com/?submit.591161 · Note
• https://vuldb.com/?id.312586 · Note
• https://t.me/cvetracker/26299 · Telegram Post
• https://twitter.com/cracbot/status/1936378631028380140 · Twitter Post
• https://vuldb.com/?ctiid.312586 · Note
• https://twitter.com/CVEnew/status/1934556169781100995 · Twitter Post
• https://t.me/latest_high_impact_cve/2671 · Telegram Post