PT-2022-23252 · Unknown · School Management System

Soummya Mukhopadhyay · Published 2022-11-28 · Updated 2024-10-17 · CVE-2022-36193

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions School Management System version 1.0

Description The issue allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.

Recommendations For School Management System version 1.0, consider implementing input validation and sanitization to prevent malicious SQL queries from being executed. As a temporary workaround, restrict access to sensitive database operations until a patch is available.

Exploit

Fix

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-36193

Affected Products

School Management System

References · 6

• 🔥 https://github.com/G37SYS73M/Advisory_G37SYS73M/blob/main/CVE-2022-36193/POC.md · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-36193 · Security Note
• https://osv.dev/vulnerability/CVE-2022-36193 · Vendor Advisory
• https://github.com/lahirudanushka/School-Management-System---PHP-MySQL · Note
• https://t.me/cvenotify/98455 · Telegram Post
• https://t.me/cibsecurity/53565 · Telegram Post