Lucene search
HistorySep 22, 2022 - 5:15 p.m.
CVE-2022-40933
online pet shop
web app
sql injection
vulnerability
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
37.7%
Online Pet Shop We App v1.0 by oretnom23 is vulnerable to SQL injection via /pet_shop/classes/Master.php?f=delete_order,id.
Affected configurations
Node
online_pet_shop_web_application_projectonline_pet_shop_web_applicationMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| online_pet_shop_web_application_project | online_pet_shop_web_application | 1.0 | cpe:2.3:a:online_pet_shop_web_application_project:online_pet_shop_web_application:1.0:*:*:*:*:*:*:* |
Related
cnvd
cnvd
Online Pet Shop We App Master.php?f=delete_order SQL Injection Vulnerability
2022-09-28 00:00:00
prion
prion
Sql injection
2022-09-22 17:15:00
cvelist
cvelist
CVE-2022-40933
2022-09-22 16:03:23
cve
cve
CVE-2022-40933
2022-09-22 17:15:11
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
37.7%
Related for NVD:CVE-2022-40933