CVE-2022-32392

creationtimestamp| type| source ---|---|--- 2022-06-24 07:30:36+00:00| seen| https://t.me/cibsecurity/45052...

CVE-2022-32392

CVE-2022-32392 affects Prison Management System v1.0. The vulnerability is a SQL injection in the admin action path, exploitable via the id parameter in /pms/admin/actions/manage_action.php (line 4). Public docs consistently describe lack of input filtering on id, enabling potentially unauthorize...