{"id":"CVE-2022-45677","aliases":["EUVD-2022-48541","GHSA-44fg-4fh7-vvgc"],"status":"published","title":"SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email...","description":"SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student_login.process.php.","severity":{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary","from":"nvd"},"epss":{"day":"2026-11-12","score":0.0086,"percentile":0.58997,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-489","CWE-89"],"published":"2023-02-21T00:00:00Z","modified":"2026-06-17T05:10:34Z","products":[{"vendor":"tuition_management_system_project","product":"tuition_management_system"}],"references":[{"url":"https://github.com/yukar1z0e/temp/blob/main/README.md","tags":["x_transferred","Exploit","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-45677"},{"url":"https://github.com/advisories/GHSA-44fg-4fh7-vvgc"}],"sources":{"cve":[{"id":"CVE-2022-45677","description":"SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student_login.process.php.","status":"published","published":"2023-02-21T00:00:00Z","modified":"2025-03-14T18:27:03.608Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"adp"}],"cwes":["CWE-489"],"updated_at":"2026-11-02T14:34:31.519788Z"}],"euvd":[{"id":"EUVD-2022-48541","description":"SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student_login.process.php.","status":"published","published":"2023-02-21T00:00:00Z","modified":"2025-03-14T18:27:03Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T20:53:02.719002Z"}],"ghsa":[{"id":"GHSA-44fg-4fh7-vvgc","title":"SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email...","description":"SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student_login.process.php.","status":"published","published":"2023-02-21T15:30:23Z","modified":"2025-03-14T21:31:33Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-89","CWE-489"],"updated_at":"2026-11-02T15:00:17.776608Z"}],"nvd":[{"id":"CVE-2022-45677","description":"SQL Injection Vulnerability in tanujpatra228 Tution Management System (TMS) via the email parameter to processes/student_login.process.php.","status":"published","published":"2023-02-21T14:15:13.667Z","modified":"2026-06-17T05:10:34.727Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-89","CWE-489"],"updated_at":"2026-11-02T14:07:36.601381Z"}]}}
