CVE-2022-27927

CRITICALNuclei

Microfinance Management System 1.0 - SQL Injection

Title source: github.com
Search associated code STIX 2.1 vulnerability STIX 2.1 with PoCs

Record summary

CVE-2022-27927 has a selected CVSS score of 9.8 (critical); EIP currently links 1 repository PoC and 1 Nuclei template.

Description

A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course_code and/or customer_number parameter.

Description source: CVE List

Exploitation context

Available material

Repository PoCs
1
Nuclei templates
1

Proofs of concept

1

Repository PoCs

GitHuberengozaydin/Microfinance-Management-System-V1.0-SQL-Injection-Vulnerability-UnauthenticatedRepository PoCby erengozaydin1Not analyzed1 file

1.9 KiB

GitHub
PoC details

Nuclei templates

1
ProjectDiscoveryCRITICALMicrofinance Management System 1.0 - SQL InjectionCVSS 9.8

Microfinance Management System 1.0 is susceptible to SQL Injection.

Impact

Successful exploitation of this vulnerability could allow an attacker to execute arbitrary SQL queries, potentially leading to unauthorized access, data leakage, or data manipulation.

Remediation

Apply the latest patch or update provided by the vendor to fix the SQL Injection vulnerability in the Microfinance Management System 1.0.

WeaknessesCWE-89
Authorslucasljm2001, ekrause
Template tagscvecve2022microfinanceedbsqlimicrofinance_management_system_projectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE: cpe:2.3:a:microfinance_management_system_project:microfinance_management_system:1.0:*:*:*:*:*:*:*
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-27927 https://www.sourcecodester.com/sites/default/files/download/oretnom23/mims_0.zip https://www.exploit-db.com/exploits/50891 https://nvd.nist.gov/vuln/detail/CVE-2022-27927 https://www.sourcecodester.com/php/14822/microfinance-management-system.html

Source: ProjectDiscovery

References

4