CVE Catalog
CVE-2023-27667
CriticalCVSS 9.8Exploitation Probability (EPSS)
Low risk0.62%
45th percentile - higher than 45% of all known CVEs
Summary
Auto Dealer Management System v1.0 contains a SQL injection vulnerability. An attacker can exploit this flaw to execute unauthorized database queries.
Risk Assessment
The risk includes potential leakage of sensitive data such as customer and vehicle information, as well as the possibility of data modification or deletion within the system.
Recommendation
It is recommended to immediately update the system to the latest version and implement input validation and prepared statements to prevent SQL injection attacks.
Original NVD description (English source)
Auto Dealer Management System v1.0 was discovered to contain a SQL injection vulnerability.