CVE-2022-30511
Published: 02 June 2022
Summary
CVE-2022-30511 is a critical-severity SQL Injection (CWE-89) vulnerability in School Dormitory Management System Project School Dormitory Management System. Its CVSS base score is 9.8 (Critical).
Operationally, ranked in the top 3.9% of CVEs by exploit likelihood; it is not currently listed in the CISA KEV catalog; a public proof-of-concept is referenced.
Deeper analysis
School Dormitory Management System version 1.0 is affected by CVE-2022-30511, a SQL injection vulnerability residing in accounts/view_details.php at line 4. The flaw is tracked under CWE-89 and carries a CVSS 3.1 base score of 9.8, reflecting network attack vector, low attack complexity, and no required privileges or user interaction, with full impact to confidentiality, integrity, and availability.
An unauthenticated remote attacker can supply crafted input to the vulnerable endpoint and execute arbitrary SQL commands against the underlying database. Successful exploitation grants the ability to read, modify, or delete application data and potentially escalate to broader system compromise.
Public references include a proof-of-concept exploit on GitHub and the original SourceCodester project page hosting the affected PHP application. The associated EPSS score has remained at 0.2377 since disclosure with no material upward trajectory observed.
EU & UK References
- 🇪🇺 ENISA EUVD: EUVD-2022-52372
Vulnerability details
School Dormitory Management System 1.0 is vulnerable to SQL Injection via accounts/view_details.php:4.
- CWE(s)
Related Threats
No named actor attribution yet. ATT&CK technique mapping in progress for this CVE.
Affected Assets
Mitigating Controls
Likely Mitigating Controls AI
Per-CVE control mapping for this CVE has not run yet; the list below is derived from the weakness types (CWEs) cited in the NVD entry.