Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication.
References
Link | Resource |
---|---|
https://github.com/sudoninja-noob/CVE-2022-29006/blob/main/CVE-2022-29006.txt | Exploit Third Party Advisory |
https://www.exploit-db.com/exploits/50370 | Exploit Third Party Advisory VDB Entry |
Configurations
History
04 Oct 2023, 17:36
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:phpgurukul:directory_management_system:1.0:*:*:*:*:*:*:* | |
First Time |
Phpgurukul
Phpgurukul directory Management System |
12 Oct 2022, 02:45
Type | Values Removed | Values Added |
---|---|---|
First Time |
Directory Management System Project directory Management System
Directory Management System Project |
|
CPE | cpe:2.3:a:directory_management_system_project:directory_management_system:1.0:*:*:*:*:*:*:* | |
References | (MISC) https://github.com/sudoninja-noob/CVE-2022-29006/blob/main/CVE-2022-29006.txt - Exploit, Third Party Advisory |
23 May 2022, 13:15
Type | Values Removed | Values Added |
---|---|---|
References |
|
17 May 2022, 20:20
Type | Values Removed | Values Added |
---|---|---|
CVSS |
v2 : v3 : |
v2 : 7.5
v3 : 9.8 |
CPE | cpe:2.3:a:phpgurukul:directory_management_system:1.0:*:*:*:*:*:*:* | |
References | (MISC) https://www.exploit-db.com/exploits/50370 - Exploit, Third Party Advisory, VDB Entry | |
CWE | CWE-89 | |
First Time |
Phpgurukul
Phpgurukul directory Management System |
11 May 2022, 14:46
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2022-05-11 14:15
Updated : 2023-12-10 14:22
NVD link : CVE-2022-29006
Mitre link : CVE-2022-29006
CVE.ORG link : CVE-2022-29006
JSON object : View
Products Affected
phpgurukul
- directory_management_system
CWE
CWE-89
Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')