CVE-2022-3473

MEDIUM Year: 2022
CVSS v3 Score
6.5
Medium
Weakness Type
CWE-707
View all →

Vulnerability Description

A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file getstatecity.php. The manipulation of the argument ci leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-210717 was assigned to this vulnerability.

Related Vulnerabilities

CVE-2018-3918

MEDIUM
CVSS:6.5(Medium)

An exploitable vulnerability exists in the remote servers of Samsung SmartThings Hub STH-ETH-250 - Firmware version 0.20.17. The hubCore process listens on port 39500 and relays any unauthenticated me...

CWE-7072018

CVE-2021-27493

MEDIUM
CVSS:6.5(Medium)

Philips Vue PACS versions 12.2.x.x and prior does not ensure or incorrectly ensures structured messages or data are well formed and that certain security properties are met before being read from an u...

CWE-7072021

CVE-2022-3470

MEDIUM
CVSS:6.5(Medium)

A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown function of the file getstatecity.php. The manipulation of the ...

CWE-7072022

CVE-2022-3825

MEDIUM
CVSS:6.5(Medium)

A vulnerability was found in Huaxia ERP 2.3 and classified as critical. Affected by this issue is some unknown functionality of the component User Management. The manipulation of the argument login le...

CWE-7072022

CVE-2020-36608

MEDIUM
CVSS:6.1(Medium)

A vulnerability, which was classified as problematic, has been found in Tribal Systems Zenario CMS. Affected by this issue is some unknown functionality of the file admin_organizer.js of the component...

CWE-7072020

CVE-2020-36621

MEDIUM
CVSS:6.1(Medium)

A vulnerability, which was classified as problematic, has been found in chedabob whatismyudid. Affected by this issue is the function exports.enrollment of the file routes/mobileconfig.js. The manipul...

CWE-7072020