← Database

CVE-2022-45526

CRITICAL CVSS: 9.8 Published: 2023-02-08 Modified: 2026-06-17

Description

SQL Injection vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows attackers to execute arbitrary commands via the ad parameter to /admin_area/login_transfer.php.

Affected Platforms

Institutional Management Website Project Institutional Management Website

Weakness Type

CWE-89, CWE-89

References