CVE-2022-34590: SQL Injection
Published Jul 20, 2022
·Updated
Hospital Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in /HMS/admin.php.
Affected Software
1 affected component
Hospital Management System Project Hospital Management System=1.0
Event History
Jul 20, 2022
CVE Published
via MITRE·08:50 PM
Data Sourced
via MITRE·08:50 PM
Description
Frequently Asked Questions
1
What is CVE-2022-34590?
CVE-2022-34590 is a SQL injection vulnerability found in Hospital Management System v1.0.
2
How does the SQL injection vulnerability in CVE-2022-34590 occur?
The SQL injection vulnerability in CVE-2022-34590 occurs through the editid parameter in the admin.php file of the Hospital Management System v1.0.
3
What is the severity of CVE-2022-34590?
The severity of CVE-2022-34590 is high, with a CVSS score of 7.2.
4
What is the Common Weakness Enumeration (CWE) for CVE-2022-34590?
The Common Weakness Enumeration (CWE) for CVE-2022-34590 is CWE-89, which is a vulnerability related to SQL injection.
5
How can I fix the SQL injection vulnerability in CVE-2022-34590?
To fix the SQL injection vulnerability in CVE-2022-34590, you should sanitize and validate user input before using it in SQL queries.