VULNERABILITY INTELLIGENCE

CVE-2022-22055

CVSS score9.8 CRITICAL
EPSS probability2.47%
CISA KEVNot currently listed
Published2022-01-14
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system or disrupt service.

Weakness classification

  • twcert@cert.org.tw: CWE-89
  • nvd@nist.gov: CWE-89

Primary references