CVE-2022-1083CWE-89

Microfinance Management System sql injection

High · published March 29, 2022

CVSS v3.1
7.3
EPSS
1%
Percentile
60.8
In the wild
Unconfirmed
What it is

A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_number/account_number/account_status_number/account_type_number with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc leads to sql injection in multiple files. It is possible to launch the attack remotely.

The record
Technical detail
CVSS v3.1
7.3 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00949 · 60.8th percentile
Weakness
CWE-89 · Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
Published
2022-03-29T05:50Z
EPSS history
Timeline
  • 29 MAR 05:50Z
    Microfinance Management System sql injection
    cvelistv5