CVE-2022-27927

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A SQL injection vulnerability exists in Microfinance Management System 1.0 when MySQL is being used as the application database. An attacker can issue SQL commands to the MySQL database through the vulnerable course_code and/or customer_number parameter.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Apr 19, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-279287.5Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.CVE-2022-279297.5Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via HTTP.CVE-2022-27937.8Emerson Electric's Proficy Machine Edition Version 9.00 and prior is vulenrable to CWE-353 Missing Support for Integrity Check, and has no aCVE-2022-279305.9Pexip Infinity 27.x before 27.3 allows remote attackers to trigger a software abort via single-sign-on if a random Universally Unique IdentiCVE-2022-279317.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via the Session Initiation Protocol.CVE-2022-279327.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.CVE-2022-279338.2Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via One Touch Join.CVE-2022-279347.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via HTTP.CVE-2022-279357.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via Epic Telehealth.CVE-2022-279367.5Pexip Infinity before 27.3 allows remote attackers to trigger a software abort via H.323.CVE-2022-279377.5Pexip Infinity before 27.3 allows remote attackers to trigger excessive resource consumption via H.264.CVE-2022-279385.5stb_image.h (aka the stb image loader) 2.19, as used in libsixel and other products, has a reachable assertion in stbi__create_png_image_raw
CVE-2022-27927: Critical severity, CVSS 9.8 | Vulnix