Lucene search

VulDBCVELIST:CVE-2022-4015

HistoryNov 16, 2022 - 12:00 a.m.

CVE-2022-4015 Sports Club Management System make_payments.php sql injection

2022-11-1600:00:00

CWE-707

VulDB

www.cve.org

cve-2022-4015

sports club management system

sql injection

CVSS3

4.7

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

0.002

Percentile

54.0%

JSON

A vulnerability, which was classified as critical, was found in Sports Club Management System 119. This affects an unknown part of the file admin/make_payments.php. The manipulation of the argument m_id/plan leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213789 was assigned to this vulnerability.

CNA Affected

[
  {
    "vendor": "unspecified",
    "product": "Sports Club Management System",
    "versions": [
      {
        "version": "119",
        "status": "affected"
      }
    ]
  }
]

References

github.com/shreyansh225/Sports-Club-Management-System/issues/6

vuldb.com/?id.213789