CVE-2022-2214

概要

参考情報

• CyberThoth/CVE · Exploit
• k0xx11/bug_report · Exploit
• vuldb.com · Third Party Advisory

library management system のその他の脆弱性

• CVE-2022-37794緊急 9.8In Library Management System 1.0 the /card/in-card.php file id_no parameters are vulnerable to SQL injection.
• CVE-2022-36735緊急 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at /admin/delete.php.
• CVE-2022-36734緊急 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the RollNo parameter at /admin/delstu.php.
• CVE-2022-36733緊急 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the M_Id parameter at /admin/del.php.
• CVE-2022-36732緊急 9.8Library Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /librarian/dele.php.