CVE-2022-1078 — SourceCodester College Website Management System sql injection

CVE-2022-1078

SourceCodester College Website Management System sql injection PUBLISHED

Description (CNA)

A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_article/. The manipulation of the argument id with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc with an unknown input leads to sql injection. It is possible to launch the attack remotely and without authentication.

Affected (CNA)

Vendor / product	Versions
SourceCodester / College Website Management System	affected 1.0

CWE

CWE-89

References

https://vuldb.com/?id.194856

ADP enrichment

CVE

No English description supplied.

https://vuldb.com/?id.194856

CISA-ADP

No English description supplied.

No references supplied.