CVE-2022-3118 – Sourcecodehero ERP System Project processlogin.php sql injection

https://notcve.org/view.php?id=CVE-2022-3118

A vulnerability was found in Sourcecodehero ERP System Project. It has been rated as critical. This issue affects some unknown processing of the file /pages/processlogin.php. The manipulation of the argument user leads to sql injection. The attack may be initiated remotely. • https://s2.loli.net/2022/09/02/N4FESXldmKWvQOw.png https://vuldb.com/?id.207845 • CWE-89: Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') •