Lucene search

K
nvd[email protected]NVD:CVE-2022-4739
HistoryDec 25, 2022 - 8:15 p.m.

CVE-2022-4739

2022-12-2520:15:26
CWE-89
web.nvd.nist.gov
5
critical
sql injection
sourcecodester school dormitory management system

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

55.6%

A vulnerability classified as critical was found in SourceCodester School Dormitory Management System 1.0. Affected by this vulnerability is an unknown functionality of the component Admin Login. The manipulation leads to sql injection. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-216775.

Affected configurations

Nvd
Node
school_dormitory_management_system_projectschool_dormitory_management_systemMatch1.0
VendorProductVersionCPE
school_dormitory_management_system_projectschool_dormitory_management_system1.0cpe:2.3:a:school_dormitory_management_system_project:school_dormitory_management_system:1.0:*:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.002

Percentile

55.6%

Related for NVD:CVE-2022-4739