Critical severity · published May 17, 2022
CVE-2022-30053
In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks
9.8
CVSS
1.2%
EPSS
No
On KEV
Description
In Toll Tax Management System 1.0, the id parameter appears to be vulnerable to SQL injection attacks.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)1.2% · higher than 69% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TT
Toll Tax Management System · Oretnom23
1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-30053
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-30053
Exploit
https://github.com/nu11secur1ty/CVE-nu11secur1ty/tree/main/vendors/oretnom23/2022/Toll-Tax-Management-System
More from Toll Tax Management System
7.2
CVE-2023-44047
Sourcecodester Toll Tax Management System v1 is vulnerable to SQL Injection
6.1
CVE-2023-36158
Cross Site Scripting (XSS) vulnerability in sourcecodester Toll Tax Management System 1.0 allows remote attackers to run arbitrary code via the First Name and Last Name fields on…
5.4
CVE-2024-51032
A Cross-site Scripting (XSS) vulnerability in manage_recipient.php of Sourcecodester Toll Tax Management System 1.0 allows remote authenticated users to inject arbitrary web…
5.4
CVE-2022-30837
Toll-tax-management-system v1.0 is vulnerable to Cross Site Scripting (XSS) via /ttms/classes/Master.php?f=save_recipient, vehicle_name