CVE-2022-32398: SQL Injection
Prison Management System v1.0 was discovered to contain a SQL injection vulnerability via the 'id' parameter at /pms/admin/cells/managecell.php:4
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-32398?
CVE-2022-32398 is a SQL injection vulnerability in Prison Management System v1.0 via the 'id' parameter.
What is the severity of CVE-2022-32398?
CVE-2022-32398 has a severity rating of 8.8 (high).
How does CVE-2022-32398 affect Prison Management System v1.0?
CVE-2022-32398 allows an attacker to execute arbitrary SQL queries through the 'id' parameter in Prison Management System v1.0.
How can I fix CVE-2022-32398?
To fix CVE-2022-32398, developers should ensure that user input is properly sanitized and validated to prevent SQL injection attacks.
Where can I find more information about CVE-2022-32398?
You can find more information about CVE-2022-32398 at the following references: [GitHub](https://github.com/Dyrandy/BugBounty/blob/main/pms/cve-2022-32398.md) and [Source Codester](https://www.sourcecodester.com/php/15368/prison-management-system-phpoop-free-source-code.html).