CVE-2022-44097

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Book Store Management System v1.0 was discovered to contain hardcoded credentials which allows attackers to escalate privileges and access the admin panel.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-798

Affected software

No affected versions have been published.

Timeline

Published: Nov 30, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-44105.4The Permalink Manager Lite plugin for WordPress is vulnerable to Stored Cross-Site Scripting in versions up to, and including 2.2.20.3 due t CVE-2022-441089.8pdftojson commit 94204bb was discovered to contain a stack overflow via the component Object::copy(Object*):Object.cc.CVE-2022-441099.8pdftojson commit 94204bb was discovered to contain a stack overflow via the component Stream::makeFilter(char*, Stream*, Object*, int).CVE-2022-441179.8Boa 0.94.14rc21 is vulnerable to SQL Injection via username. NOTE: the is disputed by multiple third parties because Boa does not ship with CVE-2022-441189.8dedecmdv6 v6.1.9 is vulnerable to Remote Code Execution (RCE) via file_manage_control.php.CVE-2022-441209.8dedecmdv6 6.1.9 is vulnerable to SQL Injection. via sys_sql_query.php.CVE-2022-44136.1Cross-site Scripting (XSS) - Reflected in GitHub repository nuxt/framework prior to v3.0.0-rc.13.CVE-2022-441369.8Zenario CMS 9.3.57186 is vulnerable to Remote Code Excution (RCE).CVE-2022-441377.2SourceCodester Sanitization Management System 1.0 is vulnerable to SQL Injection.CVE-2022-441399.8Apartment Visitor Management System v1.0 is vulnerable to SQL Injection via /avms/index.php.CVE-2022-44146.1Cross-site Scripting (XSS) - DOM in GitHub repository nuxt/framework prior to v3.0.0-rc.13.CVE-2022-441408.8Jizhicms v2.3.3 was discovered to contain a SQL injection vulnerability via the /Member/memberedit.html component.