CVE-2022-31912

Name of the Vulnerable Software and Affected Versions Online Tutor Portal Site version 1.0

Description The issue concerns a SQL Injection vulnerability via the "/otps/classes/Master.php?f=delete team" API endpoint. This allows for potential unauthorized access and manipulation of database content. No information is provided about the estimated number of potentially affected devices worldwide or real-world incidents where this issue was exploited.

Recommendations For Online Tutor Portal Site version 1.0, as a temporary workaround, consider restricting access to the "/otps/classes/Master.php?f=delete team" endpoint until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.