by Kastro
Paper/Archive/CVE-2022-37138

CVE-2022-37138

mitre — Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator af…

EPSS 1%CVSS 9.8
critical.is priorityof 100
43
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.0.680 × 2013.6No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refsourcecodester.com/php/15529/loan-management-system-oop-php-mysqlijquery-free-source-code.htmlrefgithub.com/saitamang/POC-DUMP/blob/main/Loan%20Management%20System/README.md