First published: Wed Jun 01 2022(Updated: )
Simple Inventory System v1.0 is vulnerable to SQL Injection via /inventory/table_edit_ajax.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Simple Inventory System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-31340 is classified as a high severity vulnerability due to its potential for SQL injection attacks.
To fix CVE-2022-31340, it is recommended to sanitize and parameterize all SQL queries within the affected Simple Inventory System v1.0.
The impact of CVE-2022-31340 can lead to unauthorized access to sensitive database information and possible complete compromise of the web application.
CVE-2022-31340 specifically affects Simple Inventory System version 1.0.
The vulnerability in CVE-2022-31340 lies in the /inventory/table_edit_ajax.php endpoint, which is susceptible to SQL injection.