Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-53256
HistoryJul 07, 2022 - 12:00 a.m.

Stock Management System SQL Injection Vulnerability (CNVD-2022-53256)

2022-07-0700:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
stock management
sql injection
vulnerability
inventory system
database theft

EPSS

0.002

Percentile

56.5%

Stock Management System is an inventory management system. SQL injection vulnerability exists in Stock Management System v1.0, which stems from a missing validation of external input SQL statements in the id parameter in /isms/admin/stocks/view_stock.php. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.002

Percentile

56.5%

Related for CNVD-2022-53256