CVE-2022-1078

🗓️ 29 Mar 2022 05:50:40Reported by VulDBType

cve🔗 web.nvd.nist.gov👁 59 Views🌐 WEB

Vulnerability in SourceCodester College Website Management System 1.0, allowing remote SQL injectio

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2022-1078	15 Apr 202514:55	–	circl
CNNVD	SourceCodester College Website Management System SQL注入漏洞	29 Mar 202200:00	–	cnnvd
CNVD	SourceCodester College Website Management System SQL Injection Vulnerability	31 Mar 202200:00	–	cnvd
Cvelist	CVE-2022-1078 SourceCodester College Website Management System sql injection	29 Mar 202205:50	–	cvelist
EUVD	EUVD-2022-24422	3 Oct 202520:07	–	euvd
NVD	CVE-2022-1078	29 Mar 202206:15	–	nvd
OSV	CVE-2022-1078	29 Mar 202206:15	–	osv
Prion	Sql injection	29 Mar 202206:15	–	prion
RedhatCVE	CVE-2022-1078	5 Feb 202522:58	–	redhatcve
Vulnrichment	CVE-2022-1078 SourceCodester College Website Management System sql injection	29 Mar 202205:50	–	vulnrichment

NVD

Vulners

Node

college_website_management_system_project college_website_management_systemMatch1.0

[
  {
    "product": "College Website Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
id	query param	/cwms/admin/?page=articles/view_article/	SQL injection vulnerability in view_article endpoint via id parameter, enables remote unauthenticated arbitrary SQL execution.	CWE-89

21 Nov 2024 06:39Current

8.8High risk

Vulners AI Score8.8

CVSS 27.5

CVSS 3.17.3 - 9.8

EPSS0.00334

SSVC

CWE-89