Vulnerability Details CVE-2022-29006
Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Directory Management System v1.0 allows attackers to bypass authentication.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.914
EPSS Ranking 99.6%
CVSS Severity
CVSS v3 Score 9.8
CVSS v2 Score 7.5
References
Products affected by CVE-2022-29006
-
cpe:2.3:a:phpgurukul:directory_management_system:1.0