CVE-2022-30927

 

Published at: - 07-06-2022 01:15

Last modified: - 14-06-2022 07:15

Total changes: - 2

Description

A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable "id" parameter.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

 

Verification logic

 

Reference

• https://www.sourcecodester.com/php/15328/simple-task-scheduler-system-phpoop-free-source-code.html
• https://www.sourcecodester.com/sites/default/files/download/oretnom23/tss.zip
• https://github.com/ykosan1/Simple-Task-Scheduling-System-id-SQL-Injection-Unauthenticated

 

Keywords

NVD

 

CVE-2022-30927

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures