CVE-2022-2801
Assigner: VulDB
Published: 2022-08-12T19:45:34
State: PUBLISHED
affected: product: Automated Beer Parlour Billing System
vendor: SourceCodester
versions: status: affected
version: n/a
descriptions: value: A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206247.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
problemTypes: descriptions: cweId: CWE-89
description: CWE-89 SQL Injection
type: CWE
title: SourceCodester Automated Beer Parlour Billing System Login sql injection
x_generator: vuldb.com