A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-211192.
References
| Link | Resource |
|---|---|
| https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql1.md | Exploit Third Party Advisory |
| https://vuldb.com/?id.211192 | Permissions Required |
| https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql1.md | Exploit Third Party Advisory |
| https://vuldb.com/?id.211192 | Permissions Required |
Configurations
Configuration 1 (hide)
|
History
21 Nov 2024, 07:19
| Type | Values Removed | Values Added |
|---|---|---|
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 7.3 |
| References | () https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql1.md - Exploit, Third Party Advisory | |
| References | () https://vuldb.com/?id.211192 - Permissions Required |
19 Oct 2022, 03:45
| Type | Values Removed | Values Added |
|---|---|---|
| CWE | CWE-89 | |
| References | (MISC) https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql1.md - Exploit, Third Party Advisory | |
| References | (MISC) https://vuldb.com/?id.211192 - Permissions Required | |
| CPE | cpe:2.3:a:canteen_management_system_project:canteen_management_system:1.0:*:*:*:*:*:*:* | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 9.8 |
18 Oct 2022, 11:15
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2022-10-18 11:15
Updated : 2024-11-21 07:19
NVD link : CVE-2022-3583
Mitre link : CVE-2022-3583
CVE.ORG link : CVE-2022-3583
JSON object : View
Products Affected
canteen_management_system_project
- canteen_management_system