CVE-2022-3118

CVE-2022-3118 affects the Sourcecodehero ERP System Project. A SQL injection is triggered via manipulation of the user parameter in /pages/processlogin.php, with_REMOTE exploitability and remote attack vector. Public exploit/disclosure is noted across sources (e.g., NVD/Red Hat/CVE records). The ...