by Kastro
Paper/Archive/CVE-2022-36193

CVE-2022-36193

mitre — SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the applica…

EPSS 1%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD, ADP agree)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 74.1.741 × 2014.8No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refgithub.com/lahirudanushka/School-Management-System---PHP-MySQLrefgithub.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-36193/POC.md