CVE-2022-2745

CWE-89 — SQL Injection3 documents3 sources

Severity

9.8CRITICAL

EPSS

0.2%

top 52.24%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester GYM Management System

Timeline

PublishedAug 11

Latest updateAug 12

Description

A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the file /admin/add_trainers.php of the component Add New Trainer. The manipulation of the argument trainer_name leads to sql injection. It is possible to initiate the attack remotely. The identifier VDB-206013 was assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages1 packages

▶CVEListV5sourcecodester/gym_management_systemn/a

🔴Vulnerability Details

GHSA

GHSA-9m94-v6x5-8w82: A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System↗2022-08-12

▶

CVEList

SourceCodester Gym Management System Add New Trainer add_trainers.php sql injection↗2022-08-11

▶