VULNERABILITY INTELLIGENCE

CVE-2022-37185

CVSS score7.5 HIGH
EPSS probability0.91%
CISA KEVNot currently listed
Published2022-09-06
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Description

SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage.

Weakness classification

  • nvd@nist.gov: CWE-89

Primary references