CVE-2022-40347

CRITICO 9.8CVE-2022-40347 · Published 17/02/2023 · updated 17/06/2026

In breve

CVE-2022-40347 è una vulnerabilità CRITICO (CVSS 9.8) che riguarda intern record system (intern record system project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 5.3%, superiore al 92.7% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
intern record system intern_record_system_project	`= 1.0`	No fix yet

Description

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information.

References

packetstormsecurity.com/files/171740/Intern-Record-System-1.0-SQL-Injection.html
code-projects.org/intern-record-system-in-php-with-source-code · Product
download-media.code-projects.org/2020/03/Intern_Record_System_In_PHP_With_Source_Code.zip · Product
h4md153v63n/CVE-2022-40347_Intern-Record-System-phone-V1.0-SQL-Injection-Vulnerability-Unauthenticated · Exploit

Altre vulnerabilità di intern record system

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free