Lucene search
MitreCVELIST:CVE-2022-40347HistoryFeb 17, 2023 - 12:00 a.m.
CVE-2022-40347
2023-02-1700:00:00
mitre
www.cve.org
4
sql injection
intern record system
version 1.0
controller.php
phone parameter
email parameter
depttype parameter
name parameter
arbitrary code
sensitive information
EPSS
0.002
Percentile
65.3%
SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in ‘phone’, ‘email’, ‘deptType’ and ‘name’ parameters, allows attackers to execute arbitrary code and gain sensitive information.
References
packetstormsecurity.com/files/171740/Intern-Record-System-1.0-SQL-Injection.html
code-projects.org/intern-record-system-in-php-with-source-code/
download-media.code-projects.org/2020/03/Intern_Record_System_In_PHP_With_Source_Code.zip
github.com/h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated
Related
exploitdb
exploitdb
Intern Record System v1.0 - SQL Injection (Unauthenticated)
2023-04-06 00:00:00
prion
prion
Sql injection
2023-02-17 13:15:00
nvd
nvd
CVE-2022-40347
2023-02-17 13:15:10
zdt
zdt
Intern Record System v1.0 - SQL Injection (Unauthenticated) Vulnerability
2023-04-06 00:00:00
cve
cve
CVE-2022-40347
2023-02-17 13:15:10
packetstorm
packetstorm
Intern Record System 1.0 SQL Injection
2023-04-06 00:00:00