CVE-2022-29999: SQL Injection
Insurance Management System 1.0 is vulnerable to SQL Injection via /insurance/editClient.php?clientid=.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-29999?
The severity of CVE-2022-29999 is critical.
How does CVE-2022-29999 affect Insurance Management System 1.0?
CVE-2022-29999 allows SQL Injection in Insurance Management System 1.0 via the /insurance/editClient.php?client_id= endpoint.
How can the SQL Injection vulnerability in Insurance Management System 1.0 be exploited?
The SQL Injection vulnerability in Insurance Management System 1.0 can be exploited by manipulating the client_id parameter in the /insurance/editClient.php?client_id= endpoint to execute arbitrary SQL queries.
Is there a fix available for the SQL Injection vulnerability in Insurance Management System 1.0?
There is no official fix available for the SQL Injection vulnerability in Insurance Management System 1.0. It is recommended to implement input validation and parameterized queries to prevent SQL Injection attacks.
Where can I find more information about CVE-2022-29999?
You can find more information about CVE-2022-29999 at the following link: https://github.com/k0xx11/bug_report/blob/main/vendors/itsourcecode.com/insurance-management-system/SQLi-2.md