CVE-2022-30927

Description

A SQL injection vulnerability exists in Simple Task Scheduling System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable "id" parameter.

References

https://www.sourcecodester.com/sites/default/files/download/oretnom23/tss.zip

https://www.sourcecodester.com/php/15328/simple-task-scheduler-system-phpoop-free-source-code.html

https://github.com/ykosan1/Simple-Task-Scheduling-System-id-SQL-Injection-Unauthenticated

Details

Source: Mitre, NVD

Risk Information

CVSS v2

CVSS v3

EPSS