Lucene search

VulDBCVELIST:CVE-2022-4737

HistoryDec 25, 2022 - 7:26 p.m.

CVE-2022-4737 SourceCodester Blood Bank Management System login.php sql injection

2022-12-2519:26:47

CWE-89

VulDB

www.cve.org

sourcecodester

blood bank management system

sql injection

vdb-216773

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

0.002

Percentile

55.6%

JSON

A vulnerability was found in SourceCodester Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The identifier VDB-216773 was assigned to this vulnerability.

CNA Affected

[
  {
    "vendor": "SourceCodester",
    "product": "Blood Bank Management System",
    "versions": [
      {
        "version": "1.0",
        "status": "affected"
      }
    ]
  }
]

References

vuldb.com/?ctiid.216773

vuldb.com/?id.216773

CVSS3

7.3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

AI Score

Confidence

High

EPSS

0.002

Percentile

55.6%

JSON

Related for CVELIST:CVE-2022-4737