First published: Thu May 12 2022(Updated: )
Simple Client Management System 1.0 is vulnerable to SQL Injection via /cms/admin/?page=client/view_client&id=.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Simple Client Management System Project Simple Client Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-29984 has a high severity rating due to its potential for SQL Injection attacks.
To fix CVE-2022-29984, validate and sanitize all user inputs in the affected query to prevent SQL Injection.
CVE-2022-29984 is classified as an SQL Injection vulnerability.
CVE-2022-29984 affects Simple Client Management System version 1.0.
The attack vector for CVE-2022-29984 is through the URL parameters in the /cms/admin/?page=client/view_client endpoint.