CVE-2022-36609: SQL Injection
Published Sep 2, 2022
·Updated
Clinic's Patient Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /pms/updatepatient.php.
Affected Software
2 affected components
Clinic\'s Patient Management System Project Clinic\'s Patient Management System=1.0
oretnom23 Clinic\'s Patient Management System=1.0
Event History
Sep 2, 2022
CVE Published
via MITRE·04:10 AM
Data Sourced
via MITRE·04:10 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-36609?
CVE-2022-36609 has been classified with a high severity level due to its potential to cause significant data leakage.
2
How does CVE-2022-36609 exploit SQL injection?
CVE-2022-36609 exploits SQL injection through the 'id' parameter in the /pms/update_patient.php endpoint.
3
How do I fix CVE-2022-36609?
To fix CVE-2022-36609, sanitize user inputs and use prepared statements to prevent SQL injection attacks.
4
What software versions are affected by CVE-2022-36609?
CVE-2022-36609 affects version 1.0 of the Clinic's Patient Management System.
5
What type of attack is CVE-2022-36609 associated with?
CVE-2022-36609 is associated with SQL injection attacks that can manipulate database queries.