critical9.8
CVE-2022-36193
SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or beha…
Impact
SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lahirudanushka | School Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-36193/POC.md
- https://github.com/lahirudanushka/School-Management-System---PHP-MySQL
- https://github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-36193/POC.md
- https://github.com/lahirudanushka/School-Management-System---PHP-MySQL