CVE-2022-31382

CriticalCVSS 9.8

Published: 16/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.64%

74th percentile - higher than 74% of all known CVEs

Summary

Directory Management System v1.0 was found to have a SQL injection vulnerability in the searchdata parameter of search-dirctory.php. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk includes potential leakage of sensitive data, modification or deletion of database records, and possible privilege escalation within the system.

Recommendation

Immediately update the system to the latest version or apply a security patch. Additionally, validate and sanitize all user input.

Original NVD description (English source)

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the searchdata parameter in search-dirctory.php.