PT-2022-17257 · Unknown · Simple Bakery Shop Management

Published 2022-03-02 · Updated 2022-03-14 · CVE-2022-25393

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Simple Bakery Shop Management version 1.0

Description A SQL injection issue was found, which can be exploited via the username parameter.

Recommendations For Simple Bakery Shop Management version 1.0, consider restricting access to the vulnerable parameter username to minimize the risk of exploitation until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-25393

Affected Products

Simple Bakery Shop Management

References · 3

• 🔥 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Simple-Bakery-Shop-Management · Exploit
• https://osv.dev/vulnerability/CVE-2022-25393 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-25393 · Security Note