SQL Injection Vulnerability in Ingredient Stock Management System by Packetstorm Security
CVE-2022-32311

9.8CRITICAL

Key Information:

Vendor: Ingredient Stock Management System Project
Status: Ingredient Stock Management System
Vendor: CVE Published:; 5 July 2022

🔔 Create Ingredient Stock Management System Project Vulnerability Alert

What is CVE-2022-32311?

The Ingredient Stock Management System v1.0 has been identified to be vulnerable to SQL injection attacks through the id parameter in the view_stock.php script located in the /isms/admin/stocks directory. This vulnerability could allow attackers to manipulate database queries, potentially leading to unauthorized data access or system compromise. Users are advised to apply necessary patches and implement security measures to safeguard against exploitation.

References

https://packetstormsecurity.com/files/167290/Ingredient-S...

x_refsource_MISC

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jul 5, 2022
Vulnerability Reserved
Jun 5, 2022

CVE-2022-32311 Data

JSON