CVE-2022-31384
CRITICALDirectory Management System v1.0 - SQL Injection
Title source: llmDescription
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.
Scores
CVSS v3
9.8
EPSS
0.0071
EPSS Percentile
72.0%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Classification
CWE
CWE-89
Status
published
Affected Products (1)
phpgurukul/directory_management_system
Timeline
Published
Jun 16, 2022
Tracked Since
Feb 18, 2026