CVE-2022-32395

CVE-2022-32395 affects Prison Management System v1.0. The vulnerability is a SQL injection in the application layer, exploitable via the id parameter in /pms/admin/crimes/manage_crime.php, caused by lack of input filtering/escaping for the id value (CNVD-2022-48391 reference corroborates this). C...