CVE-2022-3495

HOCH 7.2CVE-2022-3495 · Published 14/10/2022 · updated 17/06/2026

Kurz gesagt

CVE-2022-3495 ist eine Schwachstelle (HOCH (CVSS 7.2)) in simple online public access catalog (simple online public access catalog project).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.82%, höher als bei 57.4% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
simple online public access catalog simple_online_public_access_catalog_project	`= 1.0`	No fix yet

Description

A vulnerability has been found in SourceCodester Simple Online Public Access Catalog 1.0 and classified as critical. This vulnerability affects unknown code of the file /opac/Actions.php?a=login of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210784.

References

Hakcoder/Simple-Online-Public-Access-Catalog-OPAC---SQL-injection · Exploit
vuldb.com · Permissions Required

Weitere Schwachstellen in simple online public access catalog

Alle anzeigen →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free