Description
Netartmedia PHP Car Dealer contains an SQL injection vulnerability that allows unauthenticated attackers to execute arbitrary SQL queries by injecting malicious code through the features[] parameter. Attackers can submit POST requests to index.php with crafted SQL payloads in the features[] parameter to extract sensitive database information or manipulate database queries.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Netartmedia | Netartmedia PHP Car Dealer | — | — |
References
- ExploitDB-46573 exploit
- VulnCheck Advisory: Netartmedia PHP Car Dealer SQL Injection via features parameter third-party-advisory