CVE-2022-28024: SQL Injection
Published Apr 21, 2022
·Updated
Student Grading System v1.0 was discovered to contain a SQL injection vulnerability via /student-grading-system/rms.php?page=grade.
Affected Software
2 affected components
Student Grading System Project Student Grading System=1.0
oretnom23 Student Grading System=1.0
Event History
Apr 21, 2022
CVE Published
via MITRE·07:05 PM
Data Sourced
via MITRE·07:05 PM
Description
Data Sourced
via NVD·08:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-28024?
CVE-2022-28024 is rated as a high-severity SQL injection vulnerability that can be exploited by attackers.
2
How do I fix CVE-2022-28024?
To fix CVE-2022-28024, you should implement parameterized queries or prepared statements to protect against SQL injection.
3
What impact does CVE-2022-28024 have on my system?
CVE-2022-28024 can allow attackers to gain unauthorized access to your database, potentially leading to data theft or data manipulation.
4
Which version of the Student Grading System is affected by CVE-2022-28024?
CVE-2022-28024 affects version 1.0 of the Student Grading System.
5
What are the common signs of exploitation of CVE-2022-28024?
Common signs of exploitation include unusual database activity, unexpected error messages, or unauthorized changes to student grades.