CVE-2022-40032

Опубликовано: 17 фев. 2023

Источник: nvd

CVSS3: 9.8

EPSS Высокий

Описание

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.

Ссылки

http://packetstormsecurity.com/files/171739/Simple-Task-Managing-System-1.0-SQL-Injection.html
https://github.com/h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated
Exploit
Third Party Advisory
https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.html
Product
https://www.sourcecodester.com/sites/default/files/download/razormist/Task%20Managing%20System%20in%20PHP.zip
Product
http://packetstormsecurity.com/files/171739/Simple-Task-Managing-System-1.0-SQL-Injection.html
https://github.com/h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-Unauthenticated
Exploit
Third Party Advisory
https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.html
Product
https://www.sourcecodester.com/sites/default/files/download/razormist/Task%20Managing%20System%20in%20PHP.zip
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:simple_task_managing_system_project:simple_task_managing_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.7301

Высокий

9.8 Critical

CVSS3

Дефекты

CWE-89

Связанные уязвимости

GHSA-6g7q-j8xv-m8cg