CVE:CVE-2022-44348
CNNVD:CNNVD-202212-1905
Sanitization Management System是Carlo Montero个人开发者的一个消毒管理系统。
Sanitization Management System v1.0版本存在SQL注入漏洞。攻击者利用该漏洞通过/php-sms/admin/orders/update_status.php?id=执行SQL注入攻击。
solution:Upgrade sanitization_management_system_project sanitization_management_system to a higher version than 1.0,and avoid the version 1.0