CVE-2022-22055
Critical
Description
The Le-yan dental management system contains an SQL-injection vulnerability. An unauthenticated remote attacker can inject SQL commands into the input field of the login page to acquire administrator’s privilege and perform arbitrary operations on the system or disrupt service.
SeverityCritical
CVSS9.8
Exploit probability—
ProductLe-yan Dental Management System
PublishedJan 14, 2022
First seenJan 14, 2022
Weakness typeCWE-89SQL injection
How to fix
Sources list no fixed version or patch link for this vulnerability.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| le-yan_dental_management_system_project le-yan_dental_management_system | 2.8.5 | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.