CVE Published: 29/03/2022 |
CVE Updated: 02/08/2024 |
CVE Year: 2022 Source: VulDB |
Vendor: unspecified |
Product: Microfinance Management System Status : PUBLISHED
CVE-2022-1083 Description
A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_number/account_number/account_status_number/account_type_number with the input \' and (select * from(select(sleep(10)))Avx) and \'abc\' = \'abc leads to sql injection in multiple files. It is possible to launch the attack remotely.
Metrics
CVSS Version: 3.1 |
Base Score: 7.3 HIGH Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L