What’s Vulnerable › Vulnerabilities

CVE-2017-1000474

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 2.1% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2018-01-24 · updated 2026-06-17
• Weakness: CWE-89

Description

Soyket Chowdhury Vehicle Sales Management System version 2017-07-30 is vulnerable to multiple SQL Injecting in login/vehicle.php, login/profile.php, login/Actions.php, login/manage_employee.php, and login/sell.php scripts resulting in the expose of user's login credentials, SQL Injection and Stored XSS vulnerability, which leads to remote code executing.

Affected products

• Vehicle Sales Management System Project Vehicle Sales Management System: 2017-07-30

References

• http://singsip.wixsite.com/singsip/vuln
• https://www.exploit-db.com/exploits/44318/
• http://singsip.wixsite.com/singsip/vuln
• https://www.exploit-db.com/exploits/44318/

Get alerted when CVE-2017-1000474 or the next vulnerability affects your stack