CVE-2022-40030

CriticalCVSS 9.8

Published: 21/09/2022(UTC)Updated: 09/07/2026(UTC)Translated: 10/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Elevated risk

1.07%

61th percentile - higher than 61% of all known CVEs

Summary

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php. An attacker can manipulate this parameter to execute unauthorized database queries.

Risk Assessment

The risk includes potential data leakage, modification, or deletion from the database, which could compromise the confidentiality and integrity of organizational information.

Recommendation

Immediately update the system to the latest version or apply a security patch. Additionally, implement input validation and parameterized SQL queries.

Original NVD description (English source)

SourceCodester Simple Task Managing System v1.0 was discovered to contain a SQL injection vulnerability via the bookId parameter at changeStatus.php.