CVE-2022-31384
Critical · CVSS 9.8Directory Management System v1.0 — SQL Injection (CWE-89)
- CVSS
- 9.8
- nvd
- EPSS
- 1.89%
- 77th pct
- KEV
- No
- Class
- other
- CWE-89
Description
Directory Management System v1.0 was discovered to contain a SQL injection vulnerability via the fullname parameter in add-directory.php.
Search profile — drives PoC discovery
Symbols fullnameadd-directory.php
Keywords CVE-2022-31384Directory Management SystemSQL injectionfullname parameteradd-directory.phpphpgurukulSQLi
Versions: v1.0
Ranked PoCs (2) — best first
Heuristic ranking — not yet expert-vetted. Scored on structure + provenance, not execution.
- ★ 0
- ★ 0cyb3r-w0lf/nuclei-template-collection needs reviewtrickest
Recall-favoring discovery; ranking by the Stage-4 scorer (Adam's rubric). Scanner/aggregator repos are hidden.
References
Status: enriched · ingested 2026-07-05T06:00:39.000Z · profiled 2026-07-05T12:30:39.000Z