CVE-2022-32416: SQL Injection
Published Jul 14, 2022
·Updated
Product Show Room Site v1.0 is vulnerable to SQL Injection via /psrs/classes/Master.php?f=deleteproduct.
Affected Software
1 affected component
Product Show Room Site Project Product Show Room Site=1.0
Event History
Jul 14, 2022
CVE Published
via MITRE·09:35 PM
Data Sourced
via MITRE·09:35 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-32416?
CVE-2022-32416 is classified as a high-severity vulnerability due to its potential impact on database integrity.
2
How does CVE-2022-32416 allow SQL Injection?
CVE-2022-32416 allows SQL Injection through the vulnerable parameter in the /psrs/classes/Master.php file when deleting a product.
3
How can I fix CVE-2022-32416?
To fix CVE-2022-32416, implement proper input sanitization and use prepared statements for SQL queries.
4
What versions of Product Show Room Site are affected by CVE-2022-32416?
CVE-2022-32416 affects Product Show Room Site version 1.0.
5
Can CVE-2022-32416 lead to data breaches?
Yes, CVE-2022-32416 can lead to data breaches by allowing unauthorized access to sensitive database information.