CVE-2022-2679

CWE-89 — SQL Injection3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.2%
top 52.24%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Interview Management SystemJanobe Interview Management System
Timeline
PublishedAug 5
Latest updateAug 6

Description

A vulnerability was found in SourceCodester Interview Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /viewReport.php. The manipulation of the argument id with the input (UPDATEXML(9729,CONCAT(0x2e,0x716b707071,(SELECT (ELT(9729=9729,1))),0x7162766a71),7319)) leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-…

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages2 packages

🔴Vulnerability Details

2
GHSA
GHSA-jhff-q467-5xgp: A vulnerability was found in SourceCodester Interview Management System 1↗2022-08-06
▶
CVEList
SourceCodester Interview Management System viewReport.php sql injection↗2022-08-05
▶
CVE-2022-2679 (CRITICAL CVSS 9.8) | A vulnerability was found in Source | cvebase.io