CVE-2022-27992: SQL Injection
First published: Fri Apr 08 2022(Updated: )
Zoo Management System v1.0 was discovered to contain a SQL injection vulnerability at /public_html/animals via the class_id parameter.
Credit: cve@mitre.org cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Zoo Management System Project Zoo Management System | =1.0 | |
| PHPGURUKUL Zoo Management System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2022-27992?
The severity of CVE-2022-27992 is high with a CVSS score of 8.8.
How does CVE-2022-27992 affect Zoo Management System v1.0?
CVE-2022-27992 affects Zoo Management System v1.0 by allowing SQL injection attacks through the class_id parameter.
What is the CWE of CVE-2022-27992?
The CWE of CVE-2022-27992 is CWE-89 (SQL Injection).
How can I fix the SQL injection vulnerability in Zoo Management System v1.0?
To fix the SQL injection vulnerability in Zoo Management System v1.0, apply the latest security patch or update provided by the vendor. Additionally, sanitize and validate user input before using it in SQL queries.
Are there any references related to CVE-2022-27992?
Yes, you can find more information about CVE-2022-27992 at the following references: [http://packetstormsecurity.com/files/166648/PHPGurukul-Zoo-Management-System-1.0-SQL-Injection.html](http://packetstormsecurity.com/files/166648/PHPGurukul-Zoo-Management-System-1.0-SQL-Injection.html), [https://github.com/D4rkP0w4r/CVEs/blob/main/Zoo%20Management%20System%20SQLI/POC.md](https://github.com/D4rkP0w4r/CVEs/blob/main/Zoo%20Management%20System%20SQLI/POC.md)
- collector/nvd-index
- collector/nvd-api
- agent/weakness
- agent/references
- agent/severity
- agent/author
- agent/description
- agent/type
- agent/event
- agent/last-modified-date
- agent/softwarecombine
- agent/first-publish-date
- agent/tags
- collector/mitre-cve
- source/MITRE
- vendor/zoo management system project
- canonical/zoo management system project zoo management system
- version/zoo management system project zoo management system/1.0
- vendor/phpgurukul
- canonical/phpgurukul zoo management system
- version/phpgurukul zoo management system/1.0