CVE-2022-42230: SQL Injection

Published Oct 11, 2022

Updated

Simple Cold Storage Management System v1.0 is vulnerable to SQL Injection via /csms/admin/?page=user/manageuser&id=.

Affected Software

1 affected component

Simple Cold Storage Management System Project Simple Cold Storage Managment System=1.0

Event History

Oct 11, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·06:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-42230?

CVE-2022-42230 is a vulnerability in Simple Cold Storage Management System v1.0 that allows SQL Injection via the /csms/admin/?page=user/manage_user&id= parameter.

How does the SQL Injection vulnerability in Simple Cold Storage Management System v1.0 affect the system?

The SQL Injection vulnerability in Simple Cold Storage Management System v1.0 allows an attacker to manipulate database queries, potentially gaining unauthorized access or modifying data.

What is the severity of CVE-2022-42230?

CVE-2022-42230 has a severity rating of 7.2, which is considered high.

How can I fix the SQL Injection vulnerability in Simple Cold Storage Management System v1.0?

To fix the SQL Injection vulnerability, it is recommended to apply the latest patch or update provided by the vendor.

Where can I find more information about CVE-2022-42230?

You can find more information about CVE-2022-42230 at the following reference: [link](https://github.com/Tr0ee/bug_report/blob/main/vendors/oretnom23/simple-cold-storage-management-system/SQLi-1.md)