PT-2022-19363 · Unknown · Cyber Cafe Management System Project

Sanjay Singh · Published 2022-05-11 · Updated 2023-10-04 · CVE-2022-29009

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Cyber Cafe Management System Project version 1.0

Description The issue concerns multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel, allowing attackers to bypass authentication.

Recommendations For Cyber Cafe Management System Project version 1.0, update the software to a version that fixes the SQL injection vulnerabilities in the Admin panel, specifically ensuring that the username and password parameters are properly sanitized to prevent authentication bypass.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-29009

Affected Products

Cyber Cafe Management System Project

References · 7

• 🔥 https://github.com/sudoninja-noob/CVE-2022-29009/blob/main/CVE-2022-29009.txt · Exploit
• 🔥 https://exploit-db.com/exploits/50355 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-29009 · Security Note
• https://osv.dev/vulnerability/CVE-2022-29009 · Vendor Advisory
• https://t.me/cibsecurity/42361 · Telegram Post
• https://t.me/cvenotify/58983 · Telegram Post
• https://t.me/cvenotify/30350 · Telegram Post