PT-2022-23862 · Ems · Ems

Published 2022-09-06 · Updated 2022-09-09 · CVE-2022-37185

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions EMS versions 6.2

Description A SQL injection issue exists in the school information query interface, specifically in the repschoolproj.php file, which can lead to data leakage.

Recommendations For EMS version 6.2, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2022-37185

Affected Products

Ems

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2022-37185 · Security Note
• https://osv.dev/vulnerability/CVE-2022-37185 · Vendor Advisory
• https://exchange.xforce.ibmcloud.com/vulnerabilities/235480 · Note
• https://t.me/cibsecurity/49387 · Telegram Post
• https://github.com/00xdF/emes/blob/main/readme.md · Note
• http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648 · Note
• http://eme1.obec.go.th · Note