CVE-2022-40766

Description

Modern Campus Omni CMS (formerly OU Campus) 10.2.4 allows login-page SQL injection via a '" OR 1 = 1 -- - , <?php' substring.

Related CPE's

References

https://gist.github.com/Mr-Akuma/8d84b564fb051caa1b1ea31b24f6b9fb

https://moderncampus.com/products/web-content-management.html

CvssV3 impact

CvssV2 impact