Lucene search

[email protected]CVE-2022-36193

HistoryNov 28, 2022 - 1:15 p.m.

CVE-2022-36193

2022-11-2813:15:09

CWE-89

[email protected]

web.nvd.nist.gov

cve-2022-36193

sql injection

school management system

remote attackers

modify data

delete data

persistent changes

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application’s content or behavior by using malicious SQL queries.

Affected configurations

NVD

Node

school_management_system_projectschool_management_systemMatch1.0

CPENameOperatorVersion
school_management_system_project:school_management_systemschool management system project school management systemeq1.0

CPE	Name	Operator	Version
school_management_system_project:school_management_system	school management system project school management system	eq	1.0

References

github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-36193/POC.md

github.com/lahirudanushka/School-Management-System---PHP-MySQL

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

9.8 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

48.9%

JSON

Related for CVE-2022-36193

cvelist1 nvd1 osv1 prion1