CVE-2022-32401

Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/manageprivilege.php:4...

CVE-2022-32401

Affected software: Prison Management System v1.0. Vulnerability type: SQL injection in the /pms/admin/inmates/manage_privilege.php endpoint via the id parameter. Root cause: lack of proper input filtering/escaping leading to injection. Impact (as stated): not explicitly quantified in the connecte...