CVE-2022-42249: SQL Injection
Published Oct 6, 2022
·Updated
Simple Cold Storage Management System v1.0 is vulnerable to SQL injection via /csms/admin/storages/viewstorage.php?id=.
Affected Software
2 affected components
oretnom23 Simple Cold Storage Management System=1.0
Simple Cold Storage Management System Project Simple Cold Storage Management System=1.0
Event History
Oct 6, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·06:18 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-42249?
CVE-2022-42249 is classified as a medium severity SQL injection vulnerability.
2
How do I fix CVE-2022-42249?
To fix CVE-2022-42249, ensure all user inputs are properly sanitized and use parameterized queries.
3
What software is affected by CVE-2022-42249?
CVE-2022-42249 affects Simple Cold Storage Management System version 1.0.
4
Can CVE-2022-42249 lead to data compromise?
Yes, CVE-2022-42249 can allow attackers to execute arbitrary SQL commands, potentially compromising sensitive data.
5
Is CVE-2022-42249 exploit-related to specific files?
Yes, CVE-2022-42249 specifically targets the view_storage.php file in the admin directory.