CVE-2022-46502: SQL Injection
First published: Fri Jan 13 2023(Updated: )
Online Student Enrollment System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /student_enrollment/admin/login.php.
Credit: cve@mitre.org
| Affected Software | Affected Version | How to fix |
|---|---|---|
| itsourcecode Online Student Enrollment System | =1.0 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is CVE-2022-46502?
CVE-2022-46502 is a SQL injection vulnerability discovered in Online Student Enrollment System v1.0.
What is the severity of CVE-2022-46502?
The severity of CVE-2022-46502 is critical with a CVSS score of 9.8.
How does CVE-2022-46502 impact the Online Student Enrollment System v1.0?
CVE-2022-46502 allows an attacker to perform SQL injection through the username parameter in the login functionality of the Online Student Enrollment System v1.0.
How can I fix the SQL injection vulnerability in Online Student Enrollment System v1.0?
To fix the SQL injection vulnerability in Online Student Enrollment System v1.0, the application's code needs to be reviewed and updated to use parameterized queries or prepared statements to properly sanitize user input.
Where can I find more information about CVE-2022-46502?
You can find more information about CVE-2022-46502 at the following link: [GitHub - SQL injection vulnerability in Online Student Enrollment System v1.0](https://github.com/snowingllll/bug_report/blob/main/vendors/donbermoy/Online%20Student%20Enrollment%20System/SQLi-1.md)
- agent/type
- collector/mitre-cve
- source/MITRE
- agent/last-modified-date
- agent/references
- agent/author
- agent/severity
- agent/description
- agent/event
- agent/first-publish-date
- collector/nvd-index
- agent/software-canonical-lookup-request
- agent/weakness
- agent/softwarecombine
- agent/tags
- agent/source
- vendor/online student enrollment system project
- canonical/itsourcecode online student enrollment system
- version/itsourcecode online student enrollment system/1.0