PT-2022-17705 · Unknown · Lan Management System

Published 2022-03-02 · Updated 2022-03-14 · CVE-2022-26171

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Bank Management System version 1.0

Description A SQL injection issue was found in the Bank Management System, specifically via the email parameter.

Recommendations For Bank Management System version 1.0, consider restricting the use of the email parameter until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-26171

Affected Products

Lan Management System

References · 3

• 🔥 https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/campcodes.com/Bank-Management-System · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-26171 · Security Note
• https://osv.dev/vulnerability/CVE-2022-26171 · Vendor Advisory