SQL Injection Vulnerability in Das Parking Management System by Shenzhen DAS INTELLITECH
CVE-2026-9551

6.9MEDIUM

Key Information:

Vendor: Das
Status: Parking Management System 停车场管理系统
Vendor: CVE Published:; 26 May 2026

Badges

👾 Exploit Exists🟡 Public PoC

What is CVE-2026-9551?

A security vulnerability has been discovered in version 6.2.0 of Das Parking Management System, specifically within the API Endpoint and its xp_cmdshell function located in the ExportParkingRecords file. This vulnerability allows for SQL injection through manipulation of the 'Value' argument, enabling potential remote attacks. The exploit code is publicly available, raising concerns for users. Attempts to notify the vendor regarding this issue have gone unanswered, emphasizing the need for immediate remediation and increased vigilance among users.

Affected Version(s)

Parking Management System 停车场管理系统 6.2.0

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2026-9551 - Proof of Concept