What is CVE-2022-29009?

CVE-2022-29009 is a vulnerability in N/a. Published 2022-05-11.

Is CVE-2022-29009 known to be exploited?

14 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.

Vulnerability in N/a

CVE-2022-29009

Multiple SQL injection vulnerabilities via the username and password parameters in the Admin panel of Cyber Cafe Management System Project v1.0 allows attackers to bypass authentication.

EPSS: 0.859 (99.4th percentile) — read the EPSS interpretation.

Affected products

N/a — versions n/a

Public proof-of-concept exploits

sudoninja-noob/CVE-2022-29009
ARPSyndicate/cvemon
ARPSyndicate/kenzer-templates
NaInSec/CVE-PoC-in-GitHub
SYRTI/POC_
WhooAmii/POC_
k0mi-tg/CVE-POC
ARPSyndicate/cve-scores
nomi-sec/PoC-in-GitHub
trhacknon/Pocingit

References

www.exploit-db.com/exploits/50355 (x_refsource_MISC)
github.com/sudoninja-noob/CVE-2022-29009/blob/main/CVE-2022-29009.txt (x_refsource_MISC)

Frequently asked questions

What is CVE-2022-29009?: CVE-2022-29009 is a vulnerability in N/a. Published 2022-05-11.
Is CVE-2022-29009 known to be exploited?: 14 public proof-of-concept repositories are indexed. Not currently listed in the CISA KEV catalog.