CVE-2022-3714

CWE-707CWE-89 — SQL Injection3 documents3 sources
Severity
9.8CRITICAL
EPSS
0.2%
top 53.94%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Sourcecodester Online Medicine Ordering SystemOretnom23 Online Medicine Ordering System
Timeline
PublishedOct 27

Description

A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1.0. Affected is an unknown function of the file admin/?page=orders/view_order. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. VDB-212346 is the identifier assigned to this vulnerability.

CVSS vector

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 1.6 | Impact: 3.4

Affected Packages2 packages

🔴Vulnerability Details

2
CVEList
SourceCodester Online Medicine Ordering System sql injection↗2022-10-27
▶
GHSA
GHSA-r246-v4c7-q6jc: A vulnerability classified as critical has been found in SourceCodester Online Medicine Ordering System 1↗2022-10-27
▶
CVE-2022-3714 (CRITICAL CVSS 9.8) | A vulnerability classified as criti | cvebase.io