CVE-2022-37185

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Sep 6, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-371865.9In LemonLDAP::NG before 2.0.15. some sessions are not deleted when they are supposed to be deleted according to the timeoutActivity setting.CVE-2022-371897.5DDMAL MEI2Volpiano 0.8.2 is vulnerable to XML External Entity (XXE), leading to a Denial of Service. This occurs due to the usage of the uns CVE-2022-371908.8CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/ap CVE-2022-371916.5The component "cuppa/api/index.php" of CuppaCMS v1.0 is Vulnerable to LFI. An authenticated user can read system files via crafted POST requ CVE-2022-371937.4Chipolo ONE Bluetooth tracker (2020) Chipolo iOS app version 4.13.0 is vulnerable to Incorrect Access Control. Chipolo devices suffer from a CVE-2022-371977.8IOBit IOTransfer V4 is vulnerable to Unquoted Service Path.CVE-2022-371999.8JFinal CMS 5.1.0 is vulnerable to SQL Injection via /jfinal_cms/system/user/list.CVE-2022-37207.2The Event Monster WordPress plugin before 1.2.0 does not validate and escape some parameters before using them in SQL statements, which coul CVE-2022-372018.8JFinal CMS 5.1.0 is vulnerable to SQL Injection.CVE-2022-372028.8JFinal CMS 5.1.0 is vulnerable to SQL Injection via /admin/advicefeedback/list CVE-2022-372039.8JFinal CMS 5.1.0 is vulnerable to SQL Injection. These interfaces do not use the same component, nor do they have filters, but each uses its CVE-2022-372049.8Final CMS 5.1.0 is vulnerable to SQL Injection.