CVE-2022-30413

Description

References

• k0xx11/bug_report · Exploit

covid 19 travel pass management system의 다른 취약점

• CVE-2022-30842보통 5.4Covid-19 Travel Pass Management System v1.0 is vulnerable to Cross Site Scripting (XSS) via /ctpms/classes/Users.php?f=save, firstname.
• CVE-2022-30838심각 9.8Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/classes/Master.php?f=update_application_status
• CVE-2022-30417높음 7.2Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via ctpms/admin/?page=user/manage_user&id=.
• CVE-2022-30415높음 7.2Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/applications/update_status.php?id=.
• CVE-2022-30414높음 7.2Covid-19 Travel Pass Management System v1.0 is vulnerable to SQL Injection via /ctpms/admin/?page=applications/view_application&id=.