CVE-2022-46502: SQL Injection
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /studentenrollment/admin/login.php.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-46502?
CVE-2022-46502 is a SQL injection vulnerability discovered in Online Student Enrollment System v1.0.
What is the severity of CVE-2022-46502?
The severity of CVE-2022-46502 is critical with a CVSS score of 9.8.
How does CVE-2022-46502 impact the Online Student Enrollment System v1.0?
CVE-2022-46502 allows an attacker to perform SQL injection through the username parameter in the login functionality of the Online Student Enrollment System v1.0.
How can I fix the SQL injection vulnerability in Online Student Enrollment System v1.0?
To fix the SQL injection vulnerability in Online Student Enrollment System v1.0, the application's code needs to be reviewed and updated to use parameterized queries or prepared statements to properly sanitize user input.
Where can I find more information about CVE-2022-46502?
You can find more information about CVE-2022-46502 at the following link: [GitHub - SQL injection vulnerability in Online Student Enrollment System v1.0](https://github.com/snowingllll/bug_report/blob/main/vendors/donbermoy/Online%20Student%20Enrollment%20System/SQLi-1.md)