CVE-2022-1839 MEDIUM

CVE-2022-1839: Home Clean Services Management System login.php sql injection

Vendor Unspecified
Product Home Clean Services Management System
Weakness CWE-89 · SQLi
Published May 24, 2022
Last update April 15, 2025

CVSS base score

6.3/10
Attack vector Network
Attack complexity Low
Privileges required Low
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability classified as critical was found in Home Clean Services Management System 1.0. This vulnerability affects the file login.php. The manipulation of the argument email with the input admin%'/**/AND/**/(SELECT/**/5383/**/FROM/**/(SELECT(SLEEP(2)))JPeh)/**/AND/**/'frfq%'='frfq leads to sql injection. The attack can be initiated remotely but it requires authentication. Exploit details have been disclosed to the public.

Key dates

02Disclosure timeline

May 24, 2022 CVE published
April 15, 2025 Record updated