SourceCodester Canteen Management System edituser.php sql injection
CVE-2022-3584

6.3MEDIUM

Key Information:

Vendor

Sourcecodester
Status
Canteen Management System
Vendor
CVE Published:
18 October 2022

What is CVE-2022-3584?

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file edituser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211193 was assigned to this vulnerability.

Affected Version(s)

Canteen Management System 1.0

References

https://github.com/joinia/webray.com.cn/blob/main/Canteen...
https://vuldb.com/?id.211193

CVSS V3.1

Score:
6.3
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.