CVE-2022-29009

critical

Description

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.

References

https://www.exploit-db.com/exploits/50355

https://github.com/sudoninja-noob/CVE-2022-29009/blob/main/CVE-2022-29009.txt

Details

Source: Mitre, NVD

Published: 2022-05-11

Updated: 2026-06-17

Risk Information

CVSS v2

Base Score: 7.5

Vector: CVSS2#AV:N/AC:L/Au:N/C:P/I:P/A:P

Severity: High

CVSS v3

Base Score: 9.8

Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Severity: Critical

EPSS

EPSS: 0.21282

Detections

Analytics