{"containers": {"cna": {"affected": [{"product": "n/a", "vendor": "n/a", "versions": [{"status": "affected", "version": "n/a"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage."}], "problemTypes": [{"descriptions": [{"description": "n/a", "lang": "en", "type": "text"}]}], "providerMetadata": {"dateUpdated": "2022-09-06T19:28:44", "orgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "shortName": "mitre"}, "references": [{"tags": ["x_refsource_MISC"], "url": "http://eme1.obec.go.th"}, {"tags": ["x_refsource_MISC"], "url": "http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/00xdF/emes/blob/main/readme.md"}], "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "cve@mitre.org", "ID": "CVE-2022-37185", "STATE": "PUBLIC"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "n/a", "version": {"version_data": [{"version_value": "n/a"}]}}]}, "vendor_name": "n/a"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "n/a"}]}]}, "references": {"reference_data": [{"name": "http://eme1.obec.go.th", "refsource": "MISC", "url": "http://eme1.obec.go.th"}, {"name": "http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648", "refsource": "MISC", "url": "http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648"}, {"name": "https://github.com/00xdF/emes/blob/main/readme.md", "refsource": "MISC", "url": "https://github.com/00xdF/emes/blob/main/readme.md"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T10:21:33.240Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://eme1.obec.go.th"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/00xdF/emes/blob/main/readme.md"}]}]}, "cveMetadata": {"assignerOrgId": "8254265b-2729-46b6-b9e3-3dfca2d5bfca", "assignerShortName": "mitre", "cveId": "CVE-2022-37185", "datePublished": "2022-09-06T19:28:44", "dateReserved": "2022-08-01T00:00:00", "dateUpdated": "2024-08-03T10:21:33.240Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:ems_project:ems:6.2:*:*:*:*:*:*:*", "matchCriteriaId": "419BBAFF-4B97-46F4-8E13-867E27E2FC11", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "descriptions": [{"lang": "en", "value": "SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage."}, {"lang": "es", "value": "Se presenta una vulnerabilidad de inyecci\u00f3n SQL en la interfaz de consulta de informaci\u00f3n escolar (repschoolproj.php) del sistema EMS versi\u00f3n 6.2 de la Oficina de la Comisi\u00f3n de Educaci\u00f3n B\u00e1sica de Tailandia, que puede conllevar a un filtrado de datos."}], "id": "CVE-2022-37185", "lastModified": "2024-11-21T07:14:34.937", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 7.5, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.6, "source": "nvd@nist.gov", "type": "Primary"}]}, "published": "2022-09-06T20:15:09.060", "references": [{"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://eme1.obec.go.th"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648"}, {"source": "cve@mitre.org", "tags": ["Broken Link"], "url": "https://github.com/00xdF/emes/blob/main/readme.md"}, {"source": "nvd@nist.gov", "tags": ["Third Party Advisory"], "url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/235480"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://eme1.obec.go.th"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Broken Link"], "url": "https://github.com/00xdF/emes/blob/main/readme.md"}], "sourceIdentifier": "cve@mitre.org", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-89"}], "source": "nvd@nist.gov", "type": "Primary"}]}

{}