Lucene search

[email protected]CVE-2022-39180

HistoryNov 17, 2022 - 11:15 p.m.

CVE-2022-39180

2022-11-1723:15:18

CWE-89

[email protected]

web.nvd.nist.gov

cve-2022-39180

nvd

sql injection

sqli

college management system

security

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

College Management System v1.0 - SQL Injection (SQLi).
By inserting SQL commands to the username and password fields in the login.php page

Affected configurations

NVD

Node

college_management_system_projectcollege_management_systemMatch1.0

CPENameOperatorVersion
college_management_system_project:college_management_systemcollege management system project college management systemeq1.0

CPE	Name	Operator	Version
college_management_system_project:college_management_system	college management system project college management system	eq	1.0

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "College Management System v1.0",
    "vendor": "College Management",
    "versions": [
      {
        "lessThan": " Upgrade to the latest version.",
        "status": "affected",
        "version": "All versions",
        "versionType": "git"
      }
    ]
  }
]

References

www.gov.il/en/Departments/faq/cve_advisories

Social References

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

10 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

50.3%

JSON

Related for CVE-2022-39180

prion1 cvelist1 cnvd1 nvd1