CVE-2022-29006 - Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication

Back Back to CVE browser

CRITICAL

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication

Published May 11, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 19.25%

Description

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33436
Advisory
https://github.com/sudoninja-noob/CVE-2022-29006/blob/main/CVE-2022-29006.txt
x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/50370
x_refsource_MISCExploitThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-33436		Advisory
https://github.com/sudoninja-noob/CVE-2022-29006/blob/main/CVE-2022-29006.txt		x_refsource_MISCExploitThird Party Advisory
https://www.exploit-db.com/exploits/50370		x_refsource_MISCExploitThird Party AdvisoryVDB Entry