Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-05003
HistoryDec 26, 2021 - 12:00 a.m.

Simple Cold Storage Management System SQL Injection Vulnerability

2021-12-2600:00:00
China National Vulnerability Database
www.cnvd.org.cn
8

0.002 Low

EPSS

Percentile

54.5%

Simple Cold Storage Management System is a powerful and flexible ERP system that includes all the complex processing functionality required for cold storage. simple Cold Storage Management System is vulnerable in v1.0 due to a SQL injection vulnerability in the system’s view The vulnerability is caused by a lack of validation of external input SQL statements in the id parameter of storage .php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

0.002 Low

EPSS

Percentile

54.5%

Related for CNVD-2022-05003