Critical · 9.8 CVE-2022-43135 EUVD-2022-46182GHSA-fc66-xqmc-vj59

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnos…

Published Nov 16, 2022 · Updated Apr 30, 2025 · Assigned by mitre

Description

Online Diagnostic Lab Management System v1.0 was discovered to contain a SQL injection vulnerability via the username parameter at /diagnostic/login.php.

References

https://github.com/junHVV/bug_report/blob/main/vendors/mayuri_k/Online%20Diagnostic%20Lab%20Management%20System/SQLi-1.md