CVE-2022-24571

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Car Driving School Management System v1.0 is affected by SQL injection in the login page. An attacker can use simple SQL login injection payload to get admin access.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Feb 28, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-245726.1Car Driving School Management System v1.0 is affected by Cross Site Scripting (XSS) in the User Enrollment Form (Username Field). To exploit CVE-2022-245736.1A stored cross-site scripting (XSS) vulnerability in the admin interface in Element-IT HTTP Commander 7.0.0 allows unauthenticated users to CVE-2022-245745.5GPAC 1.0.1 is affected by a NULL pointer dereference in gf_dump_vrml_field.isra ().CVE-2022-245757.8GPAC 1.0.1 is affected by a stack-based buffer overflow through MP4Box.CVE-2022-245765.5GPAC 1.0.1 is affected by Use After Free through MP4Box.CVE-2022-245777.8GPAC 1.0.1 is affected by a NULL pointer dereference in gf_utf8_wcslen. (gf_utf8_wcslen is a renamed Unicode utf8_wcslen function.)CVE-2022-245787.8GPAC 1.0.1 is affected by a heap-based buffer overflow in SFS_AddString () at bifs/script_dec.c.CVE-2022-24588.2XML external entity injection(XXE) is a vulnerability that allows an attacker to interfere with an application's processing of XML data. Thi CVE-2022-245817.5ACEweb Online Portal 3.5.065 allows unauthenticated SMB hash capture via UNC. By specifying the UNC file path of an external SMB share when CVE-2022-245825.4Accounting Journal Management 1.0 is vulnerable to XSS-PHPSESSID-Hijacking. The parameter manage_user from User lists is vulnerable to XSS-S CVE-2022-245846.5Incorrect access control in Yubico OTP functionality of the YubiKey hardware tokens along with the Yubico OTP validation server. The Yubico CVE-2022-245855.4A stored cross-site scripting (XSS) vulnerability in the component /core/admin/comment.php of PluXml v5.8.7 allows attackers to execute arbi