CVE-2022-43052

CVE-2022-43052 affects Online Diagnostic Lab Management System v1.0. The vulnerability is a SQL injection via the id parameter in the endpoint /odlms/classes/Users.php?f=delete (root cause: improper input handling in a user-delete operation). The CVE has a high impact profile (CVSS v3.1: 7.2, HIG...