critical9.8Public exploit code
CVE-2022-40347
SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attacke…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Intern Record System v1.0 - SQL Injection (Unauthenticated)2023-04-06 · webapps · php · Verified
Impact
SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Intern Record System Project | Intern Record System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171740/Intern-Record-System-1.0-SQL-Injection.html
- https://code-projects.org/intern-record-system-in-php-with-source-code/
- https://download-media.code-projects.org/2020/03/Intern_Record_System_In_PHP_With_Source_Code.zip
- https://github.com/h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated
- http://packetstormsecurity.com/files/171740/Intern-Record-System-1.0-SQL-Injection.html
- https://code-projects.org/intern-record-system-in-php-with-source-code/
- https://download-media.code-projects.org/2020/03/Intern_Record_System_In_PHP_With_Source_Code.zip
- https://github.com/h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated