Kushalkhemka/embedding-cve-nvd-dataset huggingface dataset:
CVE ID: CVE-2022-2699 State: PUBLISHED Published: 2022-08-08T12:25:40.000Z Last Updated: 2025-04-15T13:56:28.868Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple E-Learning System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple E-Learning System. It has been rated as critical. Affected by this issue is some unknown functionality of the file /claire_blake. The manipulation of the argument phoneNumber leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205820. Additional Analyst
has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205820. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/water_cve/blob/main/E-learning%20System%20personal%20data%20modification%20SQl%20vulnerability.pdf - https://vuldb.com/?id.205820
CVE ID: CVE-2022-2700 State: PUBLISHED Published: 2022-08-08T12:25:56.000Z Last Updated: 2025-04-15T13:56:20.052Z Severity: MEDIUM (CVSS 4.7 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the component GET Parameter Handler. The manipulation of the argument day leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205821 was assigned to this vulnerability. Additional Analyst Notes:
d to the public and may be used. The identifier VDB-205821 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gdianq/Gym-Management-System-Sqlinjection/blob/main/README.md - https://vuldb.com/?id.205821
CVE ID: CVE-2022-2701 State: PUBLISHED Published: 2022-08-08T12:26:10.000Z Last Updated: 2025-04-15T13:56:12.451Z Severity: LOW (CVSS 3.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N) Vendors: SourceCodester Products: Simple E-Learning System Problem Types: CWE-79 Description: A vulnerability classified as problematic was found in SourceCodester Simple E-Learning System. This vulnerability affects unknown code of the file /claire_blake. The manipulation of the argument Bio leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205822 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CV
the public and may be used. VDB-205822 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/E1CHO/water_cve/blob/main/E-learning%20System%20personal%20data%20modification%20XSS%20vulnerability.pdf - https://vuldb.com/?id.205822
CVE ID: CVE-2022-2702 State: PUBLISHED Published: 2022-08-08T12:26:21.000Z Last Updated: 2025-04-14T15:59:46.356Z Severity: HIGH (CVSS 7.3 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Company Website CMS Problem Types: CWE-284 Description: A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file site-settings.php of the component Cookie Handler. The manipulation leads to improper access controls. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-205826 is the identifier assigned to this vulnerability. Addit
oit has been disclosed to the public and may be used. VDB-205826 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/Jamison2022/Company-Website-CMS/blob/main/Company%20Website%20CMS-Unauthorized%20Access.md - https://vuldb.com/?id.205826
CVE ID: CVE-2022-2703 State: PUBLISHED Published: 2022-08-08T12:50:19.000Z Last Updated: 2025-04-15T13:56:05.515Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Gym Management System. It has been classified as critical. This affects an unknown part of the component Exercises Module. The manipulation of the argument exer leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205827. Additional Analyst N
losed to the public and may be used. The associated identifier of this vulnerability is VDB-205827. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/gdianq/Gym-Management-Exercises-Sqlinjection/blob/main/README.md - https://vuldb.com/?id.205827
CVE ID: CVE-2022-2704 State: PUBLISHED Published: 2022-08-08T12:50:25.000Z Last Updated: 2025-04-15T13:55:54.877Z Severity: MEDIUM (CVSS 4.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N) Vendors: SourceCodester Products: Simple E-Learning System Problem Types: CWE-200 Description: A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205828. Additional An
loit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205828. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vuls/vuls/blob/main/Simple%20E-Learning%20System%20downloadFiles.php%20Arbitrary%20File%20Download/Simple%20E-Learning%20System%20downloadFiles.php%20Arbitrary%20File%20Download.md - https://vuldb.com/?id.205828
CVE ID: CVE-2022-2705 State: PUBLISHED Published: 2022-08-08T12:50:30.000Z Last Updated: 2025-04-15T13:55:46.843Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/manage_department.php. The manipulation of the argument id with the input -5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--%20- leads to sql injection. The attack may be initiated remotely. The expl
0NULL,database(),user(),NULL,NULL,NULL,NULL--%20- leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205829 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Simple%20Student%20Information%20System/ - https://vuldb.com/?id.205829
CVE ID: CVE-2022-2706 State: PUBLISHED Published: 2022-08-08T12:50:37.000Z Last Updated: 2025-04-15T13:55:37.109Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Online Class and Exam Scheduling System Problem Types: CWE-89 Description: A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/class_sched.php. The manipulation of the argument class with the input '||(SELECT 0x684d6b6c WHERE 5993=5993 AND (SELECT 2096 FROM(SELECT COUNT(*),CONCAT(0x717a786b71,(SELECT (ELT(2096=2096,1))),0x717a626271,FLOOR(RAND(0)*2))x FROM INFO
LECT 2096 FROM(SELECT COUNT(*),CONCAT(0x717a786b71,(SELECT (ELT(2096=2096,1))),0x717a626271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||' leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-205830 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anx0ing/CVE_demo/blob/main/2022/Online%20Class%20and%20Exam%20Scheduling%20System-SQL%20injections.md - https://vuldb.com/?id.205830
CVE ID: CVE-2022-2707 State: PUBLISHED Published: 2022-08-08T12:50:42.000Z Last Updated: 2025-04-15T13:55:28.435Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Online Class and Exam Scheduling System Problem Types: CWE-89 Description: A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/faculty_sched.php. The manipulation of the argument faculty with the input ' OR (SELECT 2078 FROM(SELECT COUNT(*),CONCAT(0x716a717071,(SELECT (ELT(2078=2078,1))),0x717a706a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCH
ROM(SELECT COUNT(*),CONCAT(0x716a717071,(SELECT (ELT(2078=2078,1))),0x717a706a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- uYCM leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205831. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/anx0ing/CVE_demo/blob/main/2022/Online%20Class%20and%20Exam%20Scheduling%20System-SQL%20injections.md - https://vuldb.com/?id.205831
CVE ID: CVE-2022-2708 State: PUBLISHED Published: 2022-08-08T12:50:48.000Z Last Updated: 2025-04-15T13:55:17.403Z Severity: MEDIUM (CVSS 5.5 CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Gym Management System Problem Types: CWE-89 Description: A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument user_login with the input 123@xx.com' OR (SELECT 9084 FROM(SELECT COUNT(*),CONCAT(0x7178767871,(SELECT (ELT(9084=9084,1))),0x71767a6271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- dPvW leads to sql injection. Acc
84,1))),0x71767a6271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- dPvW leads to sql injection. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used. The identifier VDB-205833 was assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://vuldb.com/?id.205833
CVE ID: CVE-2022-2709 State: PUBLISHED Published: 2022-09-19T14:00:56 Last Updated: 2024-08-03T00:46:03.629Z Vendors: Unknown Products: Float to Top Button Problem Types: CWE-79 Description: The Float to Top Button WordPress plugin through 2.3.6 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/1c551234-9c59-41a0-ab74-beea2d27df6b
CVE ID: CVE-2022-2710 State: PUBLISHED Published: 2022-09-19T14:00:59 Last Updated: 2024-08-03T00:46:03.416Z Vendors: Unknown Products: Scroll To Top Problem Types: CWE-79 Description: The Scroll To Top WordPress plugin before 1.4.1 does not escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfiltered_html capability is disallowed (for example in multisite setup) Additional Analyst Notes: - CVE Program Container: References: - https://wpscan.com/vulnerability/f730f584-2370-49f9-a094-a5bc521671c1
CVE ID: CVE-2022-2711 State: PUBLISHED Published: 2022-11-07T00:00:00.000Z Last Updated: 2025-05-05T20:25:41.104Z Vendors: Unknown Products: Import any XML or CSV File to WordPress Problem Types: CWE-22 Description: The Import any XML or CSV File to WordPress plugin before 3.6.9 is not validating the paths of files contained in uploaded zip archives, allowing highly privileged users, such as admins, to write arbitrary files to any part of the file system accessible by the web server via a path traversal vector. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://wpscan.com/vulnerability/11e73c23-ff5f-42e5-a4b0-0971652dcea1
CVE ID: CVE-2022-2712 State: PUBLISHED Published: 2023-01-27T00:00:00.000Z Last Updated: 2025-03-27T18:48:26.469Z Severity: MEDIUM (CVSS 6.5 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N) Vendors: The Eclipse Foundation Products: Eclipse GlassFish Problem Types: CWE-22 Description: In Eclipse GlassFish versions 5.1.0 to 6.2.5, there is a vulnerability in relative path traversal because it does not filter request path starting with './'. Successful exploitation could allow an remote unauthenticated attacker to access critical data, such as configuration files and deployed application source code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://
lication source code. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bugs.eclipse.org/580502
CVE ID: CVE-2022-2713 State: PUBLISHED Published: 2022-08-08T14:30:13 Last Updated: 2024-08-03T00:46:03.650Z Severity: HIGH (CVSS 8.6 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L) Vendors: cockpit-hq Products: cockpit-hq/cockpit Problem Types: CWE-613 Description: Insufficient Session Expiration in GitHub repository cockpit-hq/cockpit prior to 2.2.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/3080fc96-75d7-4868-84de-9fc8c9b90290 - https://github.com/cockpit-hq/cockpit/commit/dd8d0314912fa6517ebd2cc9939d9fafbe68731b
CVE ID: CVE-2022-2714 State: PUBLISHED Published: 2022-09-06T10:15:12 Last Updated: 2024-08-03T00:46:03.743Z Severity: HIGH (CVSS 8.1 CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H) Vendors: francoisjacquet Products: francoisjacquet/rosariosis Problem Types: CWE-130 Description: Improper Handling of Length Parameter Inconsistency in GitHub repository francoisjacquet/rosariosis prior to 10.0. Additional Analyst Notes: - CVE Program Container: References: - https://huntr.dev/bounties/430aedac-c7d9-4acb-9bab-bcc0595d9e95 - https://github.com/francoisjacquet/rosariosis/commit/4022954c3f41462bf6225c302a28b0429f6f4df3
CVE ID: CVE-2022-2715 State: PUBLISHED Published: 2022-08-09T06:50:10.000Z Last Updated: 2025-04-15T13:55:08.389Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Employee Management System Problem Types: CWE-89 Description: A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205834 is the identifier assigned to this vulnerability. Additional Analyst Notes:
ed to the public and may be used. VDB-205834 is the identifier assigned to this vulnerability. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://github.com/vuls/vuls/blob/main/Employee%20Management%20System/Employee%20Management%20System%20eloginwel.php%20SQL%20Injection.pdf - https://vuldb.com/?id.205834
CVE ID: CVE-2022-2716 State: PUBLISHED Published: 2022-09-06T17:19:00.000Z Last Updated: 2025-02-13T20:45:59.717Z Severity: MEDIUM (CVSS 6.4 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:N) Vendors: justinbusa Products: Beaver Builder – WordPress Page Builder Problem Types: CWE-79 Description: The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Editor' block in versions up to, and including, 2.5.5.2 due to insufficient input sanitization and output escaping. This makes it possible for authenticated attackers with access to the Beaver Builder editor to inject arbitrary web scripts in pages that will execute whenever a user accesses
access to the Beaver Builder editor to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://www.wpbeaverbuilder.com/change-logs/ - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2716
CVE ID: CVE-2022-2717 State: PUBLISHED Published: 2022-09-06T17:18:59 Last Updated: 2024-08-03T00:46:03.683Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: beardev Products: JoomSport – for Sports: Team & League, Football, Hockey & more Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-events-form page in versions up to, and including, 5.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient prepar
ns up to, and including, 5.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrative privileges, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9b6cf4ab-9e4d-4fd7-9e9e-c678ccc4d810?source=cve - https://plugins.trac.wordpress.org/browser/joomsport-sports-league-results-management/trunk/includes/pages/joomsport-page-events.php?rev=2679820#L28 - https:/
wser/joomsport-sports-league-results-management/trunk/includes/pages/joomsport-page-events.php?rev=2679820#L28 - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2717 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2767877%40joomsport-sports-league-results-management&new=2767877%40joomsport-sports-league-results-management&sfp_email=&sfph_mail=
CVE ID: CVE-2022-2718 State: PUBLISHED Published: 2022-09-06T17:19:00 Last Updated: 2024-08-03T00:46:03.788Z Severity: HIGH (CVSS 7.2 CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H) Vendors: beardev Products: JoomSport – for Sports: Team & League, Football, Hockey & more Problem Types: CWE-89 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection') Description: The JoomSport – for Sports: Team & League, Football, Hockey & more plugin for WordPress is vulnerable to SQL Injection via the 'orderby' parameter on the joomsport-page-extrafields page in versions up to, and including, 5.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient p
ersions up to, and including, 5.2.5 due to insufficient escaping on the user supplied parameter and lack of sufficient preparation on the existing SQL query. This makes it possible for authenticated attackers, with administrative privileges, to append additional SQL queries into already existing queries that can be used to extract sensitive information from the database. Additional Analyst Notes: - CVE Program Container: References: - https://www.wordfence.com/threat-intel/vulnerabilities/id/9eee9bec-609a-468b-8b44-ac4af409df93?source=cve - https://plugins.trac.wordpress.org/browser/joomsport-sports-league-results-management/trunk/includes/pages/joomsport-page-extrafields.php?rev=2540219#L26
g/browser/joomsport-sports-league-results-management/trunk/includes/pages/joomsport-page-extrafields.php?rev=2540219#L26 - https://plugins.trac.wordpress.org/changeset?sfp_email=&sfph_mail=&reponame=&old=2767877%40joomsport-sports-league-results-management&new=2767877%40joomsport-sports-league-results-management&sfp_email=&sfph_mail= - https://www.wordfence.com/vulnerability-advisories/#CVE-2022-2718
CVE ID: CVE-2022-2719 State: PUBLISHED Published: 2022-08-09T20:18:08 Last Updated: 2024-08-03T00:46:03.782Z Vendors: n/a Products: ImageMagick Problem Types: CWE-617 Description: In ImageMagick, a crafted file could trigger an assertion failure when a call to WriteImages was made in MagickWand/operation.c, due to a NULL image list. This could potentially cause a denial of service. This was fixed in upstream ImageMagick version 7.1.0-30. Additional Analyst Notes: - CVE Program Container: References: - https://bugzilla.redhat.com/show_bug.cgi?id=2116537
CVE ID: CVE-2022-2720 State: PUBLISHED Published: 2022-10-12T00:00:00.000Z Last Updated: 2025-05-16T14:57:28.731Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Information Exposure Description: In affected versions of Octopus Server it was identified that when a sensitive value is a substring of another value, sensitive value masking will only partially work. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.octopus.com/post/2022/sa2022-18/
CVE ID: CVE-2022-2721 State: PUBLISHED Published: 2022-11-25T00:00:00.000Z Last Updated: 2025-04-25T17:32:15.673Z Vendors: Octopus Deploy Products: Octopus Server Problem Types: Insertion of sensitive information into log file Description: In affected versions of Octopus Server it is possible for target discovery to print certain values marked as sensitive to log files in plaint-text in when verbose logging is enabled. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://advisories.octopus.com/post/2022/sa2022-24/
CVE ID: CVE-2022-2722 State: PUBLISHED Published: 2022-08-09T07:10:16.000Z Last Updated: 2025-04-15T13:54:58.344Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Simple Student Information System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Simple Student Information System and classified as critical. This issue affects some unknown processing of the file manage_course.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205835. Additio
has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205835. Additional Analyst Notes: - CVE Program Container: - CISA ADP Vulnrichment: References: - https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Simple%20Student%20Information%20System%20manage_course.php%20SQL%20Injection/ - https://vuldb.com/?id.205835
CVE ID: CVE-2022-2723 State: PUBLISHED Published: 2022-08-09T07:10:33.000Z Last Updated: 2025-04-15T13:54:51.306Z Severity: MEDIUM (CVSS 6.3 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L) Vendors: SourceCodester Products: Employee Management System Problem Types: CWE-89 Description: A vulnerability was found in SourceCodester Employee Management System. It has been classified as critical. Affected is an unknown function of the file /process/eprocess.php. The manipulation of the argument mailuid/pwd leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205836. Additional An