SQL Injection Vulnerability in Revenue Collection System by Unknown Vendor
CVE-2022-46966

9.8CRITICAL

Key Information:

Vendor: Revenue Collection System Project
Status: Revenue Collection System
Vendor: CVE Published:; 26 January 2023

🔔 Create Revenue Collection System Project Vulnerability Alert

What is CVE-2022-46966?

The Revenue Collection System v1.0 has a SQL injection vulnerability in the step1.php file. This flaw allows an attacker to manipulate database queries, potentially leading to unauthorized access to sensitive data and the execution of arbitrary SQL commands. It emphasizes the necessity of input validation and parameterized queries to prevent exploitation.

References

https://packetstormsecurity.com/files/169916/Revenue-Coll...

https://cxsecurity.com/issue/WLB-2022110026

CVSS V3.1

Score:

9.8

Severity:

CRITICAL

Confidentiality:

High

Integrity:

High

Availability:

High

Attack Vector:

Network

Attack Complexity:

Low

Privileges Required:

None

User Interaction:

None

Scope:

Unchanged

Download the Critical Vulnerability Management Cheat Sheet

Timeline

Vulnerability published
Jan 26, 2023
Vulnerability Reserved
Dec 12, 2022

CVE-2022-46966 Data

JSON