high8.8Public exploit code
CVE-2022-28079
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- College Management System 1.0 - 'course_code' SQL Injection (Authenticated)2022-05-12 · webapps · php
Impact
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| College Management System Project | College Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/167131/College-Management-System-1.0-SQL-Injection.html
- https://code-projects.org/college-management-system-in-php-with-source-code/
- https://github.com/erengozaydin/College-Management-System-course_code-SQL-Injection-Authenticated
- https://www.nu11secur1ty.com/2022/05/cve-2022-28079.html
- http://packetstormsecurity.com/files/167131/College-Management-System-1.0-SQL-Injection.html
- https://code-projects.org/college-management-system-in-php-with-source-code/
- https://github.com/erengozaydin/College-Management-System-course_code-SQL-Injection-Authenticated
- https://www.nu11secur1ty.com/2022/05/cve-2022-28079.html