CVE-2022-27992: SQL Injection
Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /publichtml/animals via the classid parameter.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-27992?
The severity of CVE-2022-27992 is high with a CVSS score of 8.8.
How does CVE-2022-27992 affect Zoo Management System v1.0?
CVE-2022-27992 affects Zoo Management System v1.0 by allowing SQL injection attacks through the class_id parameter.
What is the CWE of CVE-2022-27992?
The CWE of CVE-2022-27992 is CWE-89 (SQL Injection).
How can I fix the SQL injection vulnerability in Zoo Management System v1.0?
To fix the SQL injection vulnerability in Zoo Management System v1.0, apply the latest security patch or update provided by the vendor. Additionally, sanitize and validate user input before using it in SQL queries.
Are there any references related to CVE-2022-27992?
Yes, you can find more information about CVE-2022-27992 at the following references: [http://packetstormsecurity.com/files/166648/PHPGurukul-Zoo-Management-System-1.0-SQL-Injection.html](http://packetstormsecurity.com/files/166648/PHPGurukul-Zoo-Management-System-1.0-SQL-Injection.html), [https://github.com/D4rkP0w4r/CVEs/blob/main/Zoo%20Management%20System%20SQLI/POC.md](https://github.com/D4rkP0w4r/CVEs/blob/main/Zoo%20Management%20System%20SQLI/POC.md)