whoissecure/Simple-Client-Management-System-Exploit

whoissecure/Simple-Client-Management-System-Exploit

GitHubGitHub
GitHubgithub.com
Unavailable
This project is no longer available (or publicly accessible) from GitHub
Releases0
Log in to subscribe

CVE History

CVEPublishedCVSS v3CVSS v2
CVE-2022-26284↗
9.8 CRITICAL7.5 HIGH

Simple Client Management System v1.0 was discovered to contain a SQL injection vulnerability via the id parameter in the manage_client endpoint. This vulnerability allows attackers to dump the application's database via crafted HTTP requests.