First published: Tue Oct 11 2022(Updated: )
Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manage_user&id=.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Simple Cold Storage Management System Project Simple Cold Storage Managment System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-42230 is a vulnerability in Simple Cold Storage Management System v1.0 that allows SQL Injection via the /csms/admin/?page=user/manage_user&id= parameter.
The SQL Injection vulnerability in Simple Cold Storage Management System v1.0 allows an attacker to manipulate database queries, potentially gaining unauthorized access or modifying data.
CVE-2022-42230 has a severity rating of 7.2, which is considered high.
To fix the SQL Injection vulnerability, it is recommended to apply the latest patch or update provided by the vendor.
You can find more information about CVE-2022-42230 at the following reference: [link](https://github.com/Tr0ee/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md)