Security Advisory
CVE-2023-48901
9.8
CRITICAL
Vulnerability Description
A SQL injection vulnerability in tramyardg Autoexpress version 1.3.0, allows remote unauthenticated attackers to execute arbitrary SQL commands via the parameter "id" within the getPhotosByCarId function call in details.php.
Published Date
March 21, 2024
Official Source
NIST NVD Advisory