NetSight
high7.3

CVE-2022-1078

A vulnerability was found in SourceCodester College Website Management System 1.0.

Impact

A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_article/. The manipulation of the argument id with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc with an unknown input leads to sql injection. It is possible to launch the attack remotely and without authentication.

Affected products

VendorProductAffected versions
College Website Management System ProjectCollege Website Management System
Version 1.0

Weakness classification

References