CVE-2022-32392: SQL Injection
Published Jun 24, 2022
·Updated
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/actions/manageaction.php:4
Affected Software
1 affected component
Prison Management System Project Prison Management System=1.0
Event History
Jun 24, 2022
CVE Published
via MITRE·01:02 AM
Data Sourced
via MITRE·01:02 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-32392?
CVE-2022-32392 is classified as a critical SQL injection vulnerability.
2
How do I fix CVE-2022-32392?
To fix CVE-2022-32392, sanitize and validate the 'id' parameter in the SQL queries to prevent injection.
3
What systems are affected by CVE-2022-32392?
CVE-2022-32392 affects Prison Management System version 1.0.
4
Can CVE-2022-32392 lead to data breaches?
Yes, CVE-2022-32392 can lead to unauthorized access and data breaches due to SQL injection.
5
Is there a way to detect CVE-2022-32392 in my application?
You can detect CVE-2022-32392 by testing input fields for SQL injection vulnerabilities, particularly the 'id' parameter.