CVE-2022-37185

SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage.
SQL Injection
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.5 HIGH
NETWORK
LOW
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 21%
VendorProductVersion
ems_projectems
6.2
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://eme1.obec.go.th
http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648
https://github.com/00xdF/emes/blob/main/readme.md
https://exchange.xforce.ibmcloud.com/vulnerabilities/235480
http://eme1.obec.go.th
http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648
https://github.com/00xdF/emes/blob/main/readme.md