CVE-2026-9552mediumCWE-74CWE-89

CVE-2026-9552: fallo de gravedad media en Das Parking Management System 停车场管理系统

Das Parking Management System 停车场管理系统 Search API Endpoint sql injection

Publicada el

Seguir esta CVE+ Monitorear Parking Management System 停车场管理系统

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

33Vexday Risk Score

Sin señal de explotación. Ella tiene prueba de concepto pública.

ssvc Attendcvss 6.9epss 0.3%
A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerability affects unknown code of the component Search API Endpoint. The manipulation of the argument Value results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Productos afectados
Das · Parking Management System 停车场管理系统
⚠ Recursos públicos, para evaluar la exposición de sistemas que controlas o estás autorizado a probar. Prueba solo con autorización.
CVEs relacionadas — Das Parking Management System 停车场管理系统

En el mismo producto, de las más peligrosas a las menos.

CVE-2025-9843MEDIUMDas Parking Management System 停车场管理系统 FindAll information disclosureEPSS 0.5%CVE-2025-9842MEDIUMDas Parking Management System 停车场管理系统 Search information disclosureEPSS 0.5%CVE-2025-6118MEDIUMDas Parking Management System 停车场管理系统 API search sql injectionEPSS 0.4%CVE-2025-6117MEDIUMDas Parking Management System 停车场管理系统 API Search sql injectionEPSS 0.4%CVE-2025-6116MEDIUMDas Parking Management System 停车场管理系统 API Search sql injectionEPSS 0.4%CVE-2026-9551MEDIUMDas Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp_cmdshell sql injectionEPSS 0.3%