CVE-2022-40030

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php.
Configurations

Configuration 1 (hide)

cpe:2.3:a:simple_task_managing_system_project:simple_task_managing_system:1.0:*:*:*:*:*:*:*

History

22 Sep 2022, 16:11

Type Values Removed Values Added
First Time Simple Task Managing System Project
Simple Task Managing System Project simple Task Managing System
CPE cpe:2.3:a:simple_task_managing_system_project:simple_task_managing_system:1.0:*:*:*:*:*:*:*
CVSS v2 : unknown
v3 : unknown
v2 : unknown
v3 : 9.8
CWE CWE-89
References (MISC) https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-SQL2.md - (MISC) https://github.com/xidaner/CVE_HUNTER/blob/main/CVE_09/2022-09-01-SQL2.md - Exploit, Third Party Advisory
References (MISC) https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.html - (MISC) https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-source-code.html - Product, Third Party Advisory
References (MISC) http://simple.com - (MISC) http://simple.com - Broken Link

21 Sep 2022, 19:04

Type Values Removed Values Added
New CVE

Information

Published : 2022-09-21 18:15

Updated : 2022-09-22 16:11


NVD link : CVE-2022-40030

Mitre link : CVE-2022-40030


JSON object : View

Products Affected

simple_task_managing_system_project

  • simple_task_managing_system
CWE
CWE-89

Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')