HIGH🇵🇱 Wersja polska

CVE-2022-4088

CVSS 7.3v3.1pub. 2022-11-24upd. 2024-11-21

A vulnerability was found in rickxy Stock Management System and classified as critical. Affected by this issue is some unknown functionality of the file /pages/processlogin.php. The manipulation of the argument user/password leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-214322 is the identifier assigned to this vulnerability.

CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

  • Stock Management System Project Stock Management System

    APP
    Stock Management System Project
    wszystkie wersje
🔵
CHECK WITH VENDOR
No clear patch data available. Check vendor references.
Tags
SQLi
CWE
References

Related vulnerabilities

CVE-2024-36779CRITICAL9.8PL ✓ten sam produkt

SQL Injection w Sourcecodester Stock Management System v1.0

CVE-2023-51951CRITICAL9.8PL ✓ten sam produkt

SQL Injection umożliwiający RCE w Stock Management System 1.0

CVE-2020-24197CRITICAL9.8ten sam produkt

A SQL injection vulnerability in the login component in Stock Management System v1.0 allows remote attacker to...

CVE-2020-23830HIGH7.1ten sam produkt

A Cross-Site Request Forgery (CSRF) vulnerability in changeUsername.php in SourceCodester Stock Management Sys...

CVE-2022-4089MEDIUM4.3ten sam produkt

A vulnerability was found in rickxy Stock Management System. It has been declared as problematic. This vulnera...