CVE-2022-29006

EUVD-2022-33436
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
9.8 CRITICAL
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
phpgurukuldirectory_management_system
1.0
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://github.com/sudoninja-noob/CVE-2022-29006/blob/main/CVE-2022-29006.txt
https://www.exploit-db.com/exploits/50370
https://github.com/sudoninja-noob/CVE-2022-29006/blob/main/CVE-2022-29006.txt
https://www.exploit-db.com/exploits/50370