← Database

CVE-2022-30335

CRITICAL CVSS: 9.8 Published: 2022-05-09 Modified: 2026-06-17

Description

Bonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component.

Affected Platforms

Wealth Bonanza Wealth Management System

Weakness Type

CWE-89

References