CVE-2022-3997

MonikaBrzica scm contains a SQL injection vulnerability in the upis_u_bazu.php component (inputs: email/lozinka/ime/id). The flaw affects unknown functionality and can be triggered remotely; exploitation has been disclosed publicly (VDB-213698). Multiple sources repeat this CVE with no confirmed ...

CVE-2022-3998

CVE-2022-3998 affects MonikaBrzica scm, specifically the unknown part of the file uredi_korisnika.php. The vulnerability is an SQL injection triggered by manipulating the id parameter, allowing remote exploitation. The description notes that the exploit has been disclosed to the public. Public te...