CVE-2022-30352 - phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script

CRITICAL

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script

Published May 27, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 1.86%

phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script.

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

Link	Providers	Tags
https://www.cybersecurity-help.cz/vulnerabilities/54518/		x_refsource_MISCThird Party Advisory
https://www.exploit-db.com/exploits/50071		x_refsource_MISCExploitThird Party AdvisoryVDB Entry

No recorded changes yet.

Sources

Status PUBLISHED

Assigner mitre

Published May 27, 2022

Updated Aug 3, 2024

Reserved May 9, 2022

Updated n/a

Status Modified

Modified Jun 17, 2026

Severity n/a

Public date n/a