CVE-2022-31384

CriticalCVSS 9.8

Published: 16/06/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.64%

74th percentile - higher than 74% of all known CVEs

Summary

Directory Management System v1.0 was found to have a SQL injection vulnerability in the fullname parameter of add-directory.php. An attacker can exploit this flaw to execute unauthorized database queries.

Risk Assessment

The risk includes potential theft, modification, or deletion of database data, compromising the confidentiality and integrity of organizational information.

Recommendation

Immediately update the system to the latest version or apply a security patch that filters and validates input data in the fullname parameter.

Original NVD description (English source)

Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.