CVE-2022-28079
published 2022-05-05CVE-2022-28079: College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
PriorityP275high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
ITWEXPLOITVulnCheck KEV
Exploited in the wild
EPSS
28.83%
97.9th percentile
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
Affected
1 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| college_management_system_project | college_management_system | — | — |
Detection & IOCsextracted from sources · hover to see the quote
commandsubmit=Press&roll_no=3&course_code=sd' UNION ALL SELECT CONCAT(md5({{num}}),12,21),NULL,NULL,NULL,NULL#↗
- →Monitor POST requests to /admin/asign-single-student-subjects.php containing SQL injection patterns in the course_code parameter (e.g., OR, UNION SELECT, single quotes). ↗
- →The exploit requires authentication; look for authenticated sessions (valid PHPSESSID) combined with SQLi payloads in the course_code POST parameter. ↗
- →The Nuclei template matches a successful UNION-based SQLi response with HTTP 302 redirect; detect responses containing md5 hash output in body with a 302 status code from the target endpoint. ↗
- →SQLmap can be used against the vulnerable endpoint; detect sqlmap-style automated requests (e.g., sqlmap user-agent) targeting /admin/asign-single-student-subjects.php. ↗
- ·Exploitation requires prior authentication to the College Management System admin panel; unauthenticated access alone is insufficient to trigger the vulnerability. ↗
- ·The exploit was tested specifically on Windows 10 Pro with PHP 8.0.11 and Apache 2.4.51; behavior may differ on other stack configurations. ↗
CVSS provenance
nvdv3.18.8HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
nvdv2.06.5MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:P
vulncheck8.8HIGH
CVEs like this are exactly what “Exploited This Week” covers.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-8hjf-jrv4-98mp: College Management System v1
ghsa_unreviewed·2022-05-06
CVE-2022-28079 [HIGH] CWE-89 GHSA-8hjf-jrv4-98mp: College Management System v1
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
VulnCheck
college_management_system_project college_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
vulncheck·2022·CVSS 8.8
CVE-2022-28079 [HIGH] college_management_system_project college_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
college_management_system_project college_management_system Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')
College Management System v1.0 was discovered to contain a SQL injection vulnerability via the course_code parameter.
Affected: college_management_system_project college_management_system
Required Action: Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.
Exploitation References: https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2023-11-13&host_type=src&vulnerability=cve-2022-28079; https://dashboard.shadowserver.org/statistics/honeypot/vulnerability/map/?day=2024-01-22&host_type=src&vulnerability=cve-2022-28079; https://dashboar
No detection rules found.
Exploit-DB
College Management System 1.0 - 'course_code' SQL Injection (Authenticated)
exploitdb·2022-05-12·CVSS 8.8
CVE-2022-28079 [HIGH] College Management System 1.0 - 'course_code' SQL Injection (Authenticated)
College Management System 1.0 - 'course_code' SQL Injection (Authenticated)
---
# Exploit Title: College Management System - 'course_code' SQL Injection (Authenticated)
# Date: 2022-24-03
# Exploit Author: Eren Gozaydin
# Vendor Homepage: https://code-projects.org/college-management-system-in-php-with-source-code/
# Software Link: https://download.code-projects.org/details/1c3b87e5-f6a6-46dd-9b5f-19c39667866f
# Version: 1.0
# Tested on: Windows 10 Pro + PHP 8.0.11, Apache 2.4.51
# CVE: CVE-2022-28079
# References: https://nvd.nist.gov/vuln/detail/CVE-2022-28079
1. Description:
College Management System 1.0 allows SQL Injection via parameter 'course_code' in
/College-Management-System/admin/asign-single-student-subjects.php. Exploiting this issue could allow an attacker to compromise
t
Nuclei
College Management System 1.0 - SQL Injection
nuclei·CVSS 8.8
CVE-2022-28079 [HIGH] College Management System 1.0 - SQL Injection
College Management System 1.0 - SQL Injection
College Management System 1.0 contains a SQL injection vulnerability via the course code parameter.
Template:
id: CVE-2022-28079
info:
name: College Management System 1.0 - SQL Injection
author: ritikchaddha
severity: high
description: |
College Management System 1.0 contains a SQL injection vulnerability via the course code parameter.
impact: |
Successful exploitation of this vulnerability can lead to unauthorized access, data leakage, and potential manipulation of the database.
remediation: |
Upgrade to the latest version to mitigate this vulnerability.
reference:
- https://github.com/erengozaydin/College-Management-System-course_code-SQL-Injection-Authenticated
- https://download.code-projects.org/details/1c3b87e5-f6a6-46dd-9b5f-19c39667
http://packetstormsecurity.com/files/167131/College-Management-System-1.0-SQL-Injection.htmlhttps://code-projects.org/college-management-system-in-php-with-source-code/https://github.com/erengozaydin/College-Management-System-course_code-SQL-Injection-Authenticatedhttps://www.nu11secur1ty.com/2022/05/cve-2022-28079.htmlhttp://packetstormsecurity.com/files/167131/College-Management-System-1.0-SQL-Injection.htmlhttps://code-projects.org/college-management-system-in-php-with-source-code/https://github.com/erengozaydin/College-Management-System-course_code-SQL-Injection-Authenticatedhttps://www.nu11secur1ty.com/2022/05/cve-2022-28079.html
2022-05-05
Published
Exploited in the wild