Vulnerability Description
SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leakage.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ems Project | Ems | 6.2 |
Related Weaknesses (CWE)
References
- http://eme1.obec.go.thBroken Link
- http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648Broken Link
- https://github.com/00xdF/emes/blob/main/readme.mdBroken Link
- https://exchange.xforce.ibmcloud.com/vulnerabilities/235480Third Party Advisory
- http://eme1.obec.go.thBroken Link
- http://eme1.obec.go.th/~eme62/repschoolproj.php?claster=school&idarea=648Broken Link
- https://github.com/00xdF/emes/blob/main/readme.mdBroken Link
FAQ
What is CVE-2022-37185?
CVE-2022-37185 is a vulnerability with a CVSS score of 7.5 (HIGH). SQL injection vulnerability exists in the school information query interface (repschoolproj.php) of the EMS 6.2 system of the Office of the Thai Basic Education Commission, which can lead to data leak...
How severe is CVE-2022-37185?
CVE-2022-37185 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-37185?
Check the references section above for vendor advisories and patch information. Affected products include: Ems Project Ems.