nvd.nist.gov
https://nvd.nist.gov/vuln/detail/CVE-2022-30352 CVE-2022-30352
CRITICAL
phpAbook 0.9i - SQL Injection
Record summary
CVE-2022-30352 has a selected CVSS score of 9.8 (critical); EIP currently links 1 catalogued exploit.
Description
phpABook 0.9i is vulnerable to SQL Injection due to insufficient sanitization of user-supplied data in the "auth_user" parameter in index.php script.
Description source: CVE List
Exploitation context
Available material
- Catalogued exploits
- 1
Proofs of concept
1Catalogued exploits
ExploitDBphpAbook 0.9i - SQL InjectionExploitDB exploitby Alejandro PerezNot analyzed1 file
References
3cybersecurity-help.cz
https://www.cybersecurity-help.cz/vulnerabilities/54518 exploit-db.com
https://www.exploit-db.com/exploits/50071