CVE-2022-30404: SQL Injection
College Management System v1.0 is vulnerable to SQL Injection via /CollegeManagementSystem/admin/display-teacher.php?teacherid=.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-30404?
CVE-2022-30404 is a vulnerability in College Management System v1.0 that allows an attacker to perform SQL Injection via the 'teacher_id' parameter in the '/College_Management_System/admin/display-teacher.php' URL.
How severe is CVE-2022-30404?
CVE-2022-30404 has a severity rating of 7.2 (High).
How can I fix CVE-2022-30404?
To fix CVE-2022-30404, you should sanitize and validate user input before using it in SQL queries, and use prepared statements or parameterized queries to prevent SQL Injection attacks.
What is the Common Weakness Enumeration (CWE) for CVE-2022-30404?
The Common Weakness Enumeration (CWE) for CVE-2022-30404 is CWE-89 (SQL Injection).
Where can I find more information about CVE-2022-30404?
You can find more information about CVE-2022-30404 at the following reference link: [Github](https://github.com/k0xx11/bug_report/blob/main/vendors/code-projects/College-Management-System/SQLi-1.md)