CVE-2022-37185

EUVD-2022-39838
SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Base Score
CVSS 3.x
EPSS Score
Percentile: 54%
Affected Products (NVD)
VendorProductVersion
ems_projectems
6.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://eme1.obec.go.th
http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648
https://github.com/00xdF/emes/blob/main/readme.md
https://exchange.xforce.ibmcloud.com/vulnerabilities/235480
http://eme1.obec.go.th
http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648
https://github.com/00xdF/emes/blob/main/readme.md