SourceCodester Web-Based Student Clearance System POST Parameter login.php sql injection
CVE-2022-3414

5MEDIUM

Key Information:

Vendor: Sourcecodester
Status: Web-based Student Clearance System
Vendor: CVE Published:; 7 October 2022

🔔 Create Sourcecodester Vulnerability Alert

What is CVE-2022-3414?

A vulnerability was found in SourceCodester Web-Based Student Clearance System. It has been classified as critical. Affected is an unknown function of the file /Admin/login.php of the component POST Parameter Handler. The manipulation of the argument txtusername leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-210246 is the identifier assigned to this vulnerability.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Web-Based Student Clearance System

References

https://www.jianshu.com/p/8f7b7b532c02

https://vuldb.com/?id.210246

CVSS V3.1

Score:

Severity:

MEDIUM

Confidentiality:

Low

Integrity:

Low

Availability:

Low

Attack Vector:

Network

Attack Complexity:

High

Privileges Required:

Low

User Interaction:

None

Scope:

Unchanged

Timeline

Vulnerability published
Oct 7, 2022
Vulnerability Reserved
Oct 7, 2022

JSON

Sourcecodester