VULNERABILITY INTELLIGENCE
CVE-2022-30927
CVSS score9.8 CRITICAL
EPSS probability1.48%
CISA KEVNot currently listed
Published2022-06-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Description
A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable "id" parameter.
Weakness classification
- nvd@nist.gov: CWE-89
Primary references
- cve@mitre.org — Exploit, Third Party Advisory
- cve@mitre.org — Product
- cve@mitre.org — Product
- af854a3a-2127-422b-91ae-364da2661108 — Exploit, Third Party Advisory
- af854a3a-2127-422b-91ae-364da2661108 — Product
- af854a3a-2127-422b-91ae-364da2661108 — Product