Lucene search

[email protected]NVD:CVE-2022-34588

HistoryJul 20, 2022 - 9:15 p.m.

CVE-2022-34588

2022-07-2021:15:08

CWE-89

[email protected]

web.nvd.nist.gov

school management system

sql injection

timetable form

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

37.7%

JSON

itsourcecode Advanced School Management System v1.0 is vulnerable to SQL Injection via the grade parameter at /school/view/timetable_insert_form.php.

Affected configurations

Nvd

Node

advanced_school_management_system_projectadvanced_school_management_systemMatch1.0

VendorProductVersionCPE
advanced_school_management_system_projectadvanced_school_management_system1.0cpe:2.3:a:advanced_school_management_system_project:advanced_school_management_system:1.0:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
advanced_school_management_system_project	advanced_school_management_system	1.0	cpe:2.3:a:advanced_school_management_system_project:advanced_school_management_system:1.0:::::::*

References

github.com/Renrao/bug_report/blob/master/blob/main/vendors/itsourcecode.com/advanced-school-management-system/sql_injection3.md

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

37.7%

JSON

Related for NVD:CVE-2022-34588

cvelist1 prion1 cve1