CVE-2022-45677

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student_login.process.php.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89CWE-489

Affected software

No affected versions have been published.

Timeline

Published
Feb 21, 2023
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-45687.0A directory permissions management vulnerability in Lenovo System Update may allow elevation of privileges.CVE-2022-456857.5A stack overflow in Jettison before v1.5.2 allows attackers to cause a Denial of Service (DoS) via crafted JSON data.CVE-2022-456887.5A stack overflow in the XML.toJSONObject component of hutool-json v5.8.10 allows attackers to cause a Denial of Service (DoS) via crafted JSCVE-2022-456897.5hutool-json v5.8.10 was discovered to contain an out of memory error.CVE-2022-45697.8A local privilege escalation vulnerability in the ThinkPad Hybrid USB-C with USB-A Dock Firmware Update Tool could allow an attacker with loCVE-2022-456907.5A stack overflow in the org.json.JSONTokener.nextValue::JSONTokener.java component of hutool-json v5.8.10 allows attackers to cause a DenialCVE-2022-456937.5Jettison before v1.5.2 was discovered to contain a stack overflow via the map parameter. This vulnerability allows attackers to cause a DeniCVE-2022-456977.8Arbitrary File Delete vulnerability in Razer Central before v7.8.0.381 when handling files in the Accounts directory.CVE-2022-456999.8Command injection in the administration interface in APSystems ECU-R version 5203 allows a remote unauthenticated attacker to execute arbitrCVE-2022-45705.4The Top 10 WordPress plugin before 3.2.3 does not validate and escape some of its Block attributes before outputting them back in the page, CVE-2022-457018.8Arris TG2482A firmware through 9.1.103GEM9 allow Remote Code Execution (RCE) via the ping utility feature.CVE-2022-457037.8Heap buffer overflow vulnerability in binutils readelf before 2.40 via function display_debug_section in file readelf.c.
CVE-2022-45677: Critical severity, CVSS 9.8 | Vulnix