CVE-2022-43362: SQL Injection

Published Nov 1, 2022

Updated

Senayan Library Management System v9.4.2 was discovered to contain a SQL injection vulnerability via the collType parameter at loanbyclass.php.

Affected Software

1 affected component

Library Management System=9.4.2

Event History

Nov 1, 2022

CVE Published

via MITRE·12:00 AM

Data Sourced

via MITRE·12:00 AM

Description

Data Sourced

via NVD·07:15 PM

DescriptionSeverityWeaknessAffected Software

Frequently Asked Questions

What is CVE-2022-43362?

CVE-2022-43362 is a SQL injection vulnerability found in Senayan Library Management System v9.4.2.

What is the severity of CVE-2022-43362?

CVE-2022-43362 has a severity rating of 7.2, which is considered high.

How does CVE-2022-43362 occur?

CVE-2022-43362 occurs through the collType parameter in the loan_by_class.php file of the Senayan Library Management System v9.4.2, allowing for SQL injection.

Is there a fix for CVE-2022-43362?

A fix for CVE-2022-43362 may be available from the SLiMS Senayan Library Management System. It is recommended to update to the latest version to address the vulnerability.

Where can I find more information about CVE-2022-43362?

More information about CVE-2022-43362 can be found at the following reference: https://github.com/slims/slims9_bulian/issues/163.