CVE-2022-43135

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php...

CVE-2022-43135

The CVE-2022-43135 entry concerns Online Diagnostic Lab Management System v1.0 with a SQL injection flaw in the login flow. Affected component: /diagnostic/login.php, where the username parameter is injectable. Root cause: unsafeguarded handling of user input enabling arbitrary SQL execution. Imp...