Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-00607
HistoryDec 27, 2021 - 12:00 a.m.

Online Enrollment Management System SQL Injection Vulnerability

2021-12-2700:00:00
China National Vulnerability Database
www.cnvd.org.cn
5
online enrollment management
sql injection
vulnerability
user information
system security
open source

EPSS

0.002

Percentile

60.0%

Online Enrollment Management System is an open source online enrollment management system. Online Enrollment Management System version 1.0 contains a SQL injection vulnerability that stems from the lack of effective filtering and escaping of the id parameter, which could be exploited to retrieve sensitive information about all users of the system. The vulnerability is caused by the lack of effective filtering and escaping of the id parameter, which can be used to retrieve sensitive information about all users of the system.

EPSS

0.002

Percentile

60.0%

Related for CNVD-2022-00607