CVEvulnerability
CVE-2022-37185
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2022-09-06
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 7.5 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
- Weaknesses
- CWE-89
Description
SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage.
Affected configurations
• ems project ems 6.2
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- http://eme1.obec.go.th Broken Link
- http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648 Broken Link
- https://github.com/00xdF/emes/blob/main/readme.md Broken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/235480 Third Party Advisory
- http://eme1.obec.go.th Broken Link
- http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648 Broken Link
- https://github.com/00xdF/emes/blob/main/readme.md Broken Link