CVE-2022-29007: SQL Injection

Published May 11, 2022

Updated

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Dairy Farm Shop Management System v1.0 allows attackers to bypass authentication.

Affected Software

1 affected component

Phpgurukul Dairy Farm Shop Management System=1.0

Event History

May 11, 2022

CVE Published

via MITRE·01:08 PM

Data Sourced

via MITRE·01:08 PM

Description

Frequently Asked Questions

What is CVE-2022-29007?

CVE-2022-29007 is a vulnerability in the Admin panel of Dairy Farm Shop Management System v1.0 that allows attackers to bypass authentication through multiple SQL injection vulnerabilities in the username and password parameters.

How severe is CVE-2022-29007?

CVE-2022-29007 has a severity rating of 9.8 (critical).

What software is affected by CVE-2022-29007?

The Dairy Farm Shop Management System v1.0 is affected by CVE-2022-29007.

How can an attacker exploit CVE-2022-29007?

An attacker can exploit CVE-2022-29007 by using SQL injection techniques on the username and password parameters in the Admin panel.

Is there a fix available for CVE-2022-29007?

At the moment, there is no known fix available for CVE-2022-29007. It is recommended to update to a newer version of the Dairy Farm Shop Management System if one becomes available.