high7.3
CVE-2024-30974
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter.
Impact
SQL Injection vulnerability in autoexpress v.1.3.0 allows attackers to run arbitrary SQL commands via the carId parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Tramyardg | Autoexpress | Version 1.3.0 |