CVE-2022-45962: SQL Injection
First published: Mon Feb 13 2023(Updated: )
Open Solutions for Education, Inc openSIS Community Edition v8.0 and earlier is vulnerable to SQL Injection via CalendarModal.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| OS4Ed OpenSIS | <=8.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
- https://ccat.gitbook.io/cyber-sec/cve/cve-2022-45962-postauth-sqli
- https://github.com/OS4ED/openSIS-Classic
- https://github.com/OS4ED/openSIS-Classic/blob/381a1ad907285182c88e30b8bb6ce91123d9275d/CalendarModal.php#L30
- https://github.com/OS4ED/openSIS-Classic/commit/81799fd1de74d7b4bf3c4c37ad6042214e48a469
- https://github.com/OS4ED/openSIS-Classic/commit/81799fd1de74d7b4bf3c4c37ad6042214e48a469#diff-06a8cd9b045bb97531de5ba5122272ffdd519a78b1daa12060e12e337c8d2016
Frequently Asked Questions
What is the severity of CVE-2022-45962?
The severity of CVE-2022-45962 is medium with a CVSS score of 6.5.
What is SQL Injection?
SQL Injection is a type of attack that allows an attacker to manipulate a database by injecting malicious SQL code.
How does CVE-2022-45962 impact openSIS Community Edition?
CVE-2022-45962 allows an attacker to perform SQL Injection in openSIS Community Edition v8.0 and earlier via CalendarModal.php.
How can I fix CVE-2022-45962?
To fix CVE-2022-45962, it is recommended to upgrade to a patched version of openSIS Community Edition.
Where can I find more information about CVE-2022-45962?
You can find more information about CVE-2022-45962 at the following references: [CCAT Gitbook](https://ccat.gitbook.io/cyber-sec/cve/cve-2022-45962-postauth-sqli), [OS4ED GitHub Repository](https://github.com/OS4ED/openSIS-Classic), and [CalendarModal.php (line 30)](https://github.com/OS4ED/openSIS-Classic/blob/381a1ad907285182c88e30b8bb6ce91123d9275d/CalendarModal.php#L30).
- collector/nvd-index
- agent/type
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- agent/weakness
- agent/severity
- agent/remedy
- agent/last-modified-date
- agent/author
- agent/references
- agent/description
- agent/event
- agent/first-publish-date
- agent/tags
- vendor/os4ed
- canonical/os4ed opensis
- version/os4ed opensis/8.0