SQL Injection Vulnerability in Das Parking Management System by Shenzhen DAS INTELLITECH Co., Ltd.
CVE-2026-9552
6.9MEDIUM
What is CVE-2026-9552?
A security vulnerability exists within the Das Parking Management System 6.2.0, specifically affecting the Search API Endpoint. This flaw allows for SQL injection through manipulations of the parameter Value, enabling remote attackers to potentially execute harmful SQL commands. Public exploit techniques are available, and although the vendor was notified of this issue prior to disclosure, no response was received.
Affected Version(s)
Parking Management System 停车场管理系统 6.2.0
Exploit Proof of Concept (PoC)
PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.
References
CVSS V4
Score:
6.9
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Attack Required:
None
Privileges Required:
Undefined
User Interaction:
None
Timeline
- 🟡
Public PoC available
- 👾
Exploit known to exist
Vulnerability published
Vulnerability Reserved
Credit
bigbrother_man (VulDB User)
VulDB CNA Team