CVE:CVE-2017-1000474
CNNVD:CNNVD-201801-904
Soyket Chowdhury Vehicle Sales Management System是一套在线车辆销售系统脚本。
Soyket Chowdhury Vehicle Sales Management System 2017-07-30版本中的多个脚本存在安全漏洞。攻击者可利用该漏洞获取用户登录账户，实施SQL注入和跨站脚本攻击，从而执行代码。以下脚本受到影响：login/vehicle.php；login/profile.php；login/Actions.php；login/manage_employee.php；login/sell.php。
solution:Upgrade vehicle_sales_management_system_project vehicle_sales_management_system to a higher version than 2017-07-30,and avoid the version 2017-07-30