CVE-2022-26284 | BDVDB-2026-172321 Detail

Description#

Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.

Impact#

No impact statement in the source data.

Weaknesses#

No weakness recorded in the source data.

References#

https://github.com/Dir0x/SQLi-exploit---Simple-Client-Management-System/blob/main/manage_client_sqli.py

Exploit#

No public exploit known

History#

Version 12022-03-21Record published in the CVE List.
Version 22024-08-03Most recent update recorded in the CVE List.