CVE-2022-3972

Summary: CVE-2022-3972 affects Pingkon HMS-PHP and describes a vulnerability in the admin/adminlogin.php handler where manipulation of the uname/pass parameters leads to SQL injection. The issue is exploitable remotely and has had exploits publicly disclosed according to the provided documents. D...

CVE-2022-3973

CVE-2022-3973 affects Pingkon HMS-PHP, specifically the Data Pump Metadata component, in the file /admin/admin.php. The issue is a SQL injection caused by manipulation of the uname/pass parameter, allowing remote exploitation. Multiple sources (NVD, CVE lists, Red Hat, PRION, etc.) confirm a crit...