CVE-2022-2772

🗓️ 11 Aug 2022 11:51:16Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 47 Views🌐 WEB

Critical SQL injection vulnerability in SourceCodester Apartment Visitor Management System via action-visitor.php

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2022-2772	11 Aug 202216:42	–	circl
CNNVD	Apartment Visitor Management System SQL注入漏洞	11 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2772 SourceCodester Apartment Visitor Management System action-visitor.php sql injection	11 Aug 202211:51	–	cvelist
EUVD	EUVD-2022-35014	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2772	11 Aug 202212:15	–	nvd
Prion	Sql injection	11 Aug 202212:15	–	prion
RedhatCVE	CVE-2022-2772	23 May 202500:45	–	redhatcve

NVD

Node

apartment_visitors_management_system_project apartment_visitors_management_system

[
  {
    "product": "Apartment Visitor Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
editid	query param	action-visitor.php	SQL injection in action-visitor.php via manipulation of editid/remark	CWE-89
remark	query param	action-visitor.php	SQL injection in action-visitor.php via manipulation of editid/remark	CWE-89