high7.2
CVE-2022-41532
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_p…
Impact
Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/ajax.php?action=delete_plan.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Open Source Sacco Management System Project | Open Source Sacco Management System | Version 1.0 |
Weakness classification
References
- NVD record
- CVE.org record
- https://github.com/yueleve/bug_report/blob/main/vendots/mayuri_k/open-source-sacco-management-system/SQLi-1.md
- https://github.com/yueleve/bug_report/blob/main/vendots/mayuri_k/open-source-sacco-management-system/SQLi-1.md
- https://github.com/yueleve/bug_report/blob/main/vendots/mayuri_k/open-source-sacco-management-system/SQLi-1.md