Critical severity9.8NVD Advisory· Published Feb 17, 2023· Updated Jun 17, 2026

CVE-2022-40347

Description

SQL Injection vulnerability in Intern Record System version 1.0 in /intern/controller.php in 'phone', 'email', 'deptType' and 'name' parameters, allows attackers to execute arbitrary code and gain sensitive information.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Intern Record System Project/Intern Record System
cpe:2.3:a:intern_record_system_project:intern_record_system:1.0:*:*:*:*:*:*:*
Code Projects.org/Intern Record Systemllm-create
Range: = 1.0
Intern Record System/Intern Record Systemdescription

Patches

Vulnerability mechanics

References

code-projects.org/intern-record-system-in-php-with-source-code/nvdProduct
download-media.code-projects.org/2020/03/Intern_Record_System_In_PHP_With_Source_Code.zipnvdProduct
packetstormsecurity.com/files/171740/Intern-Record-System-1.0-SQL-Injection.htmlnvd

News mentions

No linked articles in our index yet.

cvss	0.637
epss	0.004
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000