id: CVE-2022-30512 info: name: School Dormitory Management System 1.0 - SQL Injection author: tess severity: critical description: | School Dormitory Management System 1.0 contains a SQL injection vulnerability via accounts/payment_history.php:31. An attacker can possibly obtain sensitive information, modify data, and/or execute unauthorized administrative operations in the context of the affected site. reference: - https://github.com/bigzooooz/CVE-2022-30512 - https://www.sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html - https://nvd.nist.gov/vuln/detail/CVE-2022-30512 classification: cvss-metrics: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H cvss-score: 9.8 cve-id: CVE-2022-30512 cwe-id: CWE-89 metadata: verified: "true" tags: cve,cve2022,sqli requests: - method: GET path: - '{{BaseURL}}/dms/admin/accounts/payment_history.php?account_id=2%27' matchers-condition: and matchers: - type: word part: body words: - 'Fatal error' - 'Uncaught Error: Call to a member function fetch_assoc()' - 'Month of' condition: and - type: word part: header words: - text/html - type: status status: - 200 # Enhanced by mp on 2022/10/12