CVEvulnerability
CVE-2022-2847
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2022-08-16
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 6.3 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
- CVSS 3.1 ([email protected])
- 9.8 CRITICAL — CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-89
Description
A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue affects some unknown processing of the file /guestmanagement/front.php. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206489 was assigned to this vulnerability.
Affected configurations
• guest management system project guest management system
Related
Weakness · CWE (1)
- CWE-89 Improper Neutralization of Special Elements used in an SQL Command weakness
References
- https://s1.ax1x.com/2022/08/13/vtDZfe.png Exploit, Third Party Advisory
- https://vuldb.com/?id.206489 Exploit, Third Party Advisory, VDB Entry
- https://s1.ax1x.com/2022/08/13/vtDZfe.png Exploit, Third Party Advisory
- https://vuldb.com/?id.206489 Exploit, Third Party Advisory, VDB Entry