RULE(RULE ID:333634)

Rule General Information
Release Date: 2021-06-03
Rule Name: 1039Jiaxiaotong Login Page SQL Injection Vulnerability -1
Severity:
CVE ID:
Rule Protection Details
Description: Beijing 1039 Technology Development Co., Ltd. is a company focusing on driving school management system, driving school mobile office system, driving school management software, driving school admissions applet development, etc., providing driving school management system solutions without blind spots. A SQL injection vulnerability exists in the login page of Beijing 1039 Technology Development Co., Ltd. driving school management system.
Impact: An attacker can inject arbitrary sql commands to view or change the database of the target by exploiting the vulnerability successfully.
Affected OS: Windows, Linux, Others
Reference:
Solutions
There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.