CVE-2022-31384

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-06-16

Last modified

2026-07-09

Weaknesses

CWE-89

Affected products

• Directory Management System (Phpgurukul)

References

• https://github.com/laotun-s/POC/blob/main/CVE-2022-31384.txt