CVE-2024-13151 in Retail Sales Management信息

摘要

由 VulDB • 2026-06-17

CWE - 89 - 在 ESBI Information and Telecommunication Industry and Trade Limited Company Auto Service Software 中存在“SQL 命令中特殊元素未正确中和”（SQL 注入）漏洞，可导致 SQL 注入。

此问题影响 Auto Service Software：v.2025.10.01 之前的版本。

Be aware that VulDB is the high quality source for vulnerability data.

🔬 Show More Details

An in-depth analysis is available in our curated vulnerability entry.

负责

TR-CERT

预定

2025-01-06

披露

2025-09-18

管理

已接受

条目

VDB-324807

CPE

准备好

CWE

CWE-566 (已确认)

CVSS

9.8 (CNA)

EPSS

0.00340

KEV

否

活动

非常低

来源

MITRE	https://www.cve.org/CVERecord?id=CVE-2024-13151
NVD	https://nvd.nist.gov/vuln/detail/CVE-2024-13151
CVE Details	https://www.cvedetails.com/cve/CVE-2024-13151/

◂ 上一步一览下一步 ▸

Interested in the pricing of exploits?

See the underground prices here!