First published: Fri Oct 28 2022(Updated: )
Simple Cold Storage Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=bookings/view_details.
Credit: cve@mitre.org
Affected Software | Affected Version | How to fix |
---|---|---|
Simple Cold Storage Management System Project Simple Cold Storage Managment System | =1.0 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2022-43230 is classified as a high-severity SQL injection vulnerability that can lead to unauthorized data access.
To fix CVE-2022-43230, validate and sanitize user input for the 'id' parameter before processing it in SQL queries.
CVE-2022-43230 affects Simple Cold Storage Management System version 1.0.
CVE-2022-43230 is a SQL injection vulnerability that allows attackers to execute arbitrary SQL code.
Yes, CVE-2022-43230 can be exploited remotely if an attacker can send a request to the vulnerable endpoint.