CRITICAL

CVE-2022-40032

CVSS v3

9.8

CRITICAL

EPSS Score

78.3%

exploit probability

CISA KEV

No

known exploited

Exploitation

SSVC status

Description

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.

Technical details

Published
2/17/2023
Exploit-DB
EDB-51273

Frequently asked questions

What is CVE-2022-40032?

SQL Injection vulnerability in Simple Task Managing System version 1.0 in login.php in 'username' and 'password' parameters, allows attackers to execute arbitrary code and gain sensitive information.

Is CVE-2022-40032 actively exploited?

Active exploitation of CVE-2022-40032 has not been confirmed. The EPSS score is 78.3%, indicating the estimated probability of exploitation in the next 30 days.

What is the CVSS score for CVE-2022-40032?

CVE-2022-40032 has a CVSS v3 base score of 9.8 (CRITICAL severity).

Is CVE-2022-40032 affecting your environment?

Use isMalicious to check if any of your IPs or domains are associated with this vulnerability's IOCs.