CVE-2022-36193
CRITICALSchool Management System 1.0 - SQL Injection
Title source: llmDescription
SQL injection in School Management System 1.0 allows remote attackers to modify or delete data, causing persistent changes to the application's content or behavior by using malicious SQL queries.
Exploits (1)
Scores
CVSS v3
9.8
EPSS
0.0199
EPSS Percentile
83.7%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-89
Status
published
Products (1)
lahirudanushka/school_management_system
1.0
Published
Nov 28, 2022
Tracked Since
Feb 18, 2026