CVE-2022-32394: SQL Injection
Published Jun 24, 2022
·Updated
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/inmates/viewinmate.php:3
Affected Software
1 affected component
Prison Management System Project Prison Management System=1.0
Event History
Jun 24, 2022
CVE Published
via MITRE·01:04 AM
Data Sourced
via MITRE·01:04 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-32394?
CVE-2022-32394 is considered a high severity vulnerability due to the potential for unauthorized access to sensitive data.
2
How do I fix CVE-2022-32394?
To fix CVE-2022-32394, sanitize user input by using prepared statements or parameterized queries to prevent SQL injection attacks.
3
What kind of vulnerability is CVE-2022-32394?
CVE-2022-32394 is a SQL injection vulnerability that can allow attackers to manipulate database queries.
4
In which component of Prison Management System does CVE-2022-32394 occur?
CVE-2022-32394 occurs in the /pms/admin/inmates/view_inmate.php component of the Prison Management System.
5
Which version of Prison Management System is affected by CVE-2022-32394?
CVE-2022-32394 affects version 1.0 of the Prison Management System.