Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-68365
HistorySep 29, 2022 - 12:00 a.m.

Simple Exam Reviewer Management System SQL Injection Vulnerability

2022-09-2900:00:00
China National Vulnerability Database
www.cnvd.org.cn
10
sql injection
data theft
security flaw
database vulnerability

EPSS

0.003

Percentile

65.5%

Simple Exam Reviewer Management System is a simple examiner management system. version 1.0 of Simple Exam Reviewer Management System is vulnerable to SQL injection, which stems from a lack of validation of externally entered SQL statements in the id parameter. An attacker could use this vulnerability to execute illegal SQL commands to steal sensitive database data.

EPSS

0.003

Percentile

65.5%

Related for CNVD-2022-68365