CVE-2022-32022

HIGH NUCLEI

Car Rental Management System 1.0 - SQL Injection via Admin Login Endpoint

Title source: llm

CVE-2022-32022 has a Nuclei detection template available — see the Nuclei card below for the Shodan/FOFA recon queries.

Car Rental Management System v1.0 is vulnerable to SQL Injection via /ip/car-rental-management-system/admin/ajax.php?action=login.

Car Rental Management System 1.0 - SQL Injection

HIGHVERIFIEDby arafatansari

Shodan: http.html:"Car Rental Management System" || http.html:"car rental management system"

FOFA: body="car rental management system"

Core 2

Core References

Exploit, Third Party Advisory x_refsource_misc

Broken Link

CVSS v3 7.2

EPSS 0.0477

EPSS Percentile 90.8%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

CWE

CWE-89

Status published

Products (1)

car_rental_management_system_project/car_rental_management_system 1.0

Published Jun 02, 2022

Tracked Since Feb 18, 2026