CVE-2022-40032

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.

CVSS v3.1 NVD

9.8 CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

20.69% chance of exploitation in the next 30 days, 98th percentile

Nuclei

critical · CWE-89

Published

2023-02-17

Updated

2025-03-18

Proof-of-concept exploits (1)

• h4md153v63n/CVE-2022-40032_Simple-Task-Managing-System-V1.0-SQL-Injection-Vulnerability-U…5★ · 2023-12-25

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2022/CVE-2022-40032.yaml

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51273

Security advisories

• https://www.sourcecodester.com/php/15624/simple-task-managing-system-php-mysqli-free-sour…
• https://www.sourcecodester.com/sites/default/files/download/razormist/Task%20Managing%20S…

References

• CVE Record
• NVD entry

Related

• CVE-2022-40347
• CVE-2022-40348
• CVE-2023-7105
• CVE-2023-7106
• CVE-2023-7108
• CVE-2023-7109