Home
Trends
Vulnerabilities
News
Researchers
Why dbugs?

Ykosan1

#25340of 53,630
9.8Total CVSS
Vulnerabilities · 1
PT-2022-20388
9.8
2022-06-06
Unknown · Mysql Server · CVE-2022-30927
**Name of the Vulnerable Software and Affected Versions** Simple Task Scheduling System version 1.0 **Description** A SQL injection issue exists when MySQL is used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable `id` parameter. **Recommendations** For Simple Task Scheduling System version 1.0, consider restricting access to the `id` parameter to minimize the risk of exploitation. As a temporary workaround, avoid using the `id` parameter in sensitive operations until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.