CVE-2022-50805

Senayan Library Management System 9.0.0 contains a SQL injection vulnerability in the 'class' parameter that allows attackers to inject malicious SQL queries. Attackers can exploit the vulnerability by submitting crafted payloads to manipulate database queries and potentially extract sensitive information.

CVSS v4.0

8.8 HIGHCVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

CVSS v3.1

8.2 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

EPSS

0.33% chance of exploitation in the next 30 days, 25th percentile

Published

2026-01-13

Updated

2026-03-05

Proof-of-concept exploits (1)

• https://www.exploit-db.com/exploits/51161

References

• CVE Record
• NVD entry

Related

• CVE-2022-50804
• CVE-2022-50806
• CVE-2022-50803
• CVE-2022-50808
• CVE-2022-50802
• CVE-2022-50890