PT-2022-18808

CVE-2022-28099

Published

2022-05-04

Updated

2022-05-12

Description by

CVSS 3.1

8.8

High

MetricsAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Poultry Farm Management System version 1.0

Description A SQL injection issue was found in the Poultry Farm Management System. The vulnerability can be exploited via the Item parameter at the "/farm/store.php" API endpoint.

Recommendations For Poultry Farm Management System version 1.0, consider restricting access to the /farm/store.php endpoint until a patch is available, and avoid using the Item parameter in this endpoint to minimize the risk of exploitation.

Exploitability

Exploit

Fix

Impacts

Researchers

Ibrahim Ekim Isik

Vendors

Affected products

Weakness enumeration

CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')

Related identifiers

CVE-2022-28099