CVE-2022-1082highCWE-89

CVE-2022-1082: falha de alta gravidade em SourceCodester Microfinance Management System

SourceCodester Microfinance Management System Login Page login.php sql injection

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Microfinance Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 0.9%
A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /mims/login.php of the Login Page. The manipulation of the argument username/password with the input '||1=1# leads to sql injection. The attack may be initiated remotely.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Microfinance Management System
CVEs relacionadas — SourceCodester Microfinance Management System

No mesmo produto, das mais perigosas para as menos.

CVE-2022-1081MEDIUMSourceCodester Microfinance Management System addcustomerHandler.php cross site scriptingEPSS 0.7%