CVE-2022-37138

Loan Management System 1.0 is vulnerable to SQL Injection at the login page, which allows unauthorized users to login as Administrator after injecting username form.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

1.19% chance of exploitation in the next 30 days, 67th percentile

Published

2022-09-14

Updated

2024-08-03

Proof-of-concept exploits (1)

• saitamang/POC-DUMP/blob/main/Loan%20Management%20System/README.md2★ · 2024-03-05

Security advisories

• https://www.sourcecodester.com/php/15529/loan-management-system-oop-php-mysqlijquery-free…

References

• CVE Record
• NVD entry

Related

• CVE-2021-35475
• CVE-2022-36667
• CVE-2022-36668
• CVE-2022-36669
• CVE-2022-37137
• CVE-2022-37139