CVE-2022-31383

CriticalCVSS 9.8

Published: 16/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.64%

74th percentile - higher than 74% of all known CVEs

Summary

Directory Management System v1.0 was found to have a SQL injection vulnerability in the editid parameter of view-directory.php. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk includes potential theft, modification, or deletion of database data, compromising the confidentiality and integrity of organizational information.

Recommendation

Immediately update the system to the latest version or apply security patches. Also implement input validation and use parameterized SQL queries.

Original NVD description (English source)

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the editid parameter in view-directory.php.