Online Diagnostic Lab Management System
CVE-2022-43124
HIGH
Severity by source
AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Primary rating from NVD · only source for this CVE.
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Lifecycle Timeline
1DescriptionNVD
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user.
AnalysisAI
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user. Rated high severity (CVSS 7.2), this vulnerability is remotely exploitable, low attack complexity. Public exploit code available and no vendor patch available.
Technical ContextAI
This vulnerability is classified as SQL Injection (CWE-89), which allows attackers to execute arbitrary SQL commands against the database. Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter at /admin/?page=user/manage_user. Affected products include: Online Diagnostic Lab Management System Project Online Diagnostic Lab Management System.
RemediationAI
No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Use parameterized queries/prepared statements. Never concatenate user input into SQL. Apply least-privilege database permissions.
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username pa
Online Diagnostic Lab Management System version 1.0 remote exploit that bypasses login with SQL injection and then uploa
An issue was discovered in Online Diagnostic Lab Management System 1.0, There is a SQL injection vulnerability via "dob"
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete
There is an unauthorized access vulnerability in Online Diagnostic Lab Management System 1.0. Rated high severity (CVSS
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete
Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the id paramete
Same weakness CWE-89 – SQL Injection
View allShare
External POC / Exploit Code
Leaving vuln.today