Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nvd[email protected]NVD:CVE-2022-4726
HistoryDec 27, 2022 - 3:15 p.m.

CVE-2022-4726

2022-12-2715:15:12
CWE-707
CWE-89
[email protected]
web.nvd.nist.gov
cve-2022-4726
critical
sql injection
remote attack
vdb-216739
sourcecodester sanitization management system 1.0

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

49.4%

JSON

A vulnerability classified as critical was found in SourceCodester Sanitization Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation of the argument username/password leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-216739.

Affected configurations

NVD
Node
sanitization_management_system_projectsanitization_management_systemMatch1.0

Related

cve 1
prion 1
cvelist 1
cve
cve
CVE-2022-4726
2022-12-27 15:15:12
prion
prion
Sql injection
2022-12-27 15:15:00
cvelist
cvelist
CVE-2022-4726 SourceCodester Sanitization Management System Admin Login sql injection
2022-12-24 00:00:00

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

0.001 Low

EPSS

Percentile

49.4%

JSON
Related for NVD:CVE-2022-4726
cve1prion1cvelist1