CVE-2022-1078 — SourceCodester College Website Management System sql injection
A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_artic…
Published: 2022-03-29 · CVSS: 7.3 · CVSS 3.1
A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file /cwms/admin/?page=articles/view_article/. The manipulation of the argument id with the input ' and (select * from(select(sleep(10)))Avx) and 'abc' = 'abc with an unknown input leads to sql injection. It is possible to launch the attack remotely and without authentication.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7