CVE-2022-41535 - Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_borrower.php

Back Back to CVE browser

HIGH

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_borrower.php

Published Oct 14, 2022

7.2

HIGH

CVSS 3.1

EPSS 0.78%

Description

Open Source SACCO Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /sacco_shield/manage_borrower.php.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-89

SQL Injection

References (2)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44728
Advisory
https://github.com/coues/bug_report/blob/main/vendors/mayuri_k/open-source-sacco-management-system/SQLi-1.md
ExploitThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-44728		Advisory
https://github.com/coues/bug_report/blob/main/vendors/mayuri_k/open-source-sacco-management-system/SQLi-1.md		ExploitThird Party Advisory