CVE-2022-2724

🗓️ 09 Aug 2022 07:10:46Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 51 Views🌐 WEB

A critical SQL injection vulnerability in SourceCodester Employee Management System allows remote attackers to manipulate the mailuid argument in /process/aprocess.php, leading to a public exploit. (CVE-2022-2724

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-2724	9 Aug 202212:24	–	circl
CNNVD	Employee Management System SQL注入漏洞	9 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2724 SourceCodester Employee Management System aprocess.php sql injection	9 Aug 202207:10	–	cvelist
EUVD	EUVD-2022-34966	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2724	9 Aug 202207:15	–	nvd
Prion	Sql injection	9 Aug 202207:15	–	prion
Positive Technologies	PT-2022-18321 · Sourcecodester · Sourcecodester Employee Management System	9 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2724	23 May 202501:01	–	redhatcve

NVD

Node

employee_management_system_project employee_management_systemMatch-

[
  {
    "product": "Employee Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
bewhale	www.bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20aprocess.php%20SQL%20Injection/