First published: Tue Nov 22 2022(Updated: )
Billing System Project v1.0 was discovered to contain a SQL injection vulnerability via the orderId parameter at fetchOrderData.php.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Billing Management System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-43212 is classified as a moderate severity SQL injection vulnerability.
To fix CVE-2022-43212, input validation and parameterized queries should be implemented in the fetchOrderData.php file.
CVE-2022-43212 affects Billing System Project version 1.0.
The impact of CVE-2022-43212 is potential unauthorized access to the database and manipulation of data.
Yes, CVE-2022-43212 is a publicly known vulnerability and is included in the CVE database.