CVE-2022-2677: fallo de gravedad media en SourceCodester Apartment Visitor Management…
SourceCodester Apartment Visitor Management System index.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 0.8%
A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND (SELECT 4955 FROM (SELECT(SLEEP(5)))RSzF) AND 'htiy'='htiy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205665 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Apartment Visitor Management SystemCVEs relacionadas — SourceCodester Apartment Visitor Management…
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-2684LOWSourceCodester Apartment Visitor Management System manage-apartment.php cross site scriptingEPSS 0.7%CVE-2025-4937MEDIUMSourceCodester Apartment Visitor Management System profile.php sql injectionEPSS 0.6%CVE-2025-4481MEDIUMSourceCodester Apartment Visitor Management System search-result.php sql injectionEPSS 0.6%CVE-2025-3045MEDIUMoretnom23/SourceCodester Apartment Visitor Management System remove-apartment.php sql injectionEPSS 0.6%CVE-2022-2772MEDIUMSourceCodester Apartment Visitor Management System action-visitor.php sql injectionEPSS 0.6%CVE-2025-3315MEDIUMSourceCodester Apartment Visitor Management System view-report.php sql injectionEPSS 0.6%