CVE-2022-30335

—

CVSS 3.1

9.8 critical

EPSS

1%p67

Published

May 9, 2022 (May 9, 2022)

Modified

Jun 17, 2026

Description

Bonanza Wealth Management System (BWM) 7.3.2 allows SQL injection via the login form. Users who supply the application with a SQL injection payload in the User Name textbox could collect all passwords in encrypted format from the Microsoft SQL Server component.

Vendors: wealth
Products: bonanza wealth management system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.