CVE-2022-27927
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
65Vexday Risk Score
Patch now. It exploitation observed in the wild and has a working public exploit.
ssvc Actepss 14%
from disclosure to weapon1665 days
Published on NVDApr 19
1st PoC+1665d
Observed exploitation+1609d
A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course_code and/or customer_number parameter.
Affected products
n/a · n/a