CVE-2026-9552mediumCWE-74CWE-89

CVE-2026-9552: falha de média gravidade em Das Parking Management System 停车场管理系统

Das Parking Management System 停车场管理系统 Search API Endpoint sql injection

Publicada em

Seguir esta CVE+ Monitorar Parking Management System 停车场管理系统

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

33Vexday Risk Score

Sem sinal de exploração. Ela tem prova de conceito pública.

ssvc Attendcvss 6.9epss 0.3%
A security flaw has been discovered in Das Parking Management System 停车场管理系统 6.2.0. This vulnerability affects unknown code of the component Search API Endpoint. The manipulation of the argument Value results in sql injection. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P
Produtos afetados
Das · Parking Management System 停车场管理系统
⚠ Recursos públicos, para você avaliar a exposição de sistemas que controla ou está autorizado a testar. Teste apenas com autorização.
CVEs relacionadas — Das Parking Management System 停车场管理系统

No mesmo produto, das mais perigosas para as menos.

CVE-2025-9843MEDIUMDas Parking Management System 停车场管理系统 FindAll information disclosureEPSS 0.5%CVE-2025-9842MEDIUMDas Parking Management System 停车场管理系统 Search information disclosureEPSS 0.5%CVE-2025-6118MEDIUMDas Parking Management System 停车场管理系统 API search sql injectionEPSS 0.4%CVE-2025-6117MEDIUMDas Parking Management System 停车场管理系统 API Search sql injectionEPSS 0.4%CVE-2025-6116MEDIUMDas Parking Management System 停车场管理系统 API Search sql injectionEPSS 0.4%CVE-2026-9551MEDIUMDas Parking Management System 停车场管理系统 API Endpoint ExportParkingRecords xp_cmdshell sql injectionEPSS 0.3%