Lucene search

VulDBCVE-2022-3414

HistoryOct 07, 2022 - 6:15 a.m.

CVE-2022-3414

2022-10-0706:15:09

CWE-707

VulDB

web.nvd.nist.gov

vulnerability

sourcecodester

web-based

student clearance system

cve-2022-3414

critical

sql injection

remote attack

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

54.0%

JSON

A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST Parameter Handler. The manipulation of the argument txtusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-210246 is the identifier assigned to this vulnerability.

Affected configurations

Nvd

Node

web-based_student_clearance_system_projectweb-based_student_clearance_systemMatch-

VendorProductVersionCPE
web-based_student_clearance_system_projectweb-based_student_clearance_system-cpe:2.3:a:web-based_student_clearance_system_project:web-based_student_clearance_system:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
web-based_student_clearance_system_project	web-based_student_clearance_system	-	cpe:2.3:a:web-based_student_clearance_system_project:web-based_student_clearance_system:-:::::::*

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Web-Based Student Clearance System",
    "versions": [
      {
        "version": "n/a",
        "status": "affected"
      }
    ]
  }
]

References

vuldb.com/?id.210246

www.jianshu.com/p/8f7b7b532c02

Social References

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

54.0%

JSON

Related for CVE-2022-3414