VULNERABILITY INTELLIGENCE

CVE-2022-36193

CVSS score9.8 CRITICAL
EPSS probability1.49%
CISA KEVNot currently listed
Published2022-11-28
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.

Weakness classification

  • nvd@nist.gov: CWE-89
  • 134c704f-9b21-4f2e-91b3-4a467353bcc0: CWE-89

Primary references