CVE-2022-2705: fallo de gravedad media en SourceCodester Simple Student Information System
SourceCodester Simple Student Information System manage_department.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 0.8%
A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/manage_department.php. The manipulation of the argument id with the input -5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--%20- leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205829 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Simple Student Information SystemCVEs relacionadas — SourceCodester Simple Student Information System
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-2722MEDIUMSourceCodester Simple Student Information System manage_course.php sql injectionEPSS 0.9%CVE-2023-2425LOWSourceCodester Simple Student Information System Add New Course cross site scriptingEPSS 0.6%CVE-2026-19710MEDIUMSourceCodester Simple Student Information System view_department.php sql injectionEPSS 0.4%CVE-2026-105809MEDIUMSourceCodester Simple Student Information System Profile Field register.php cross site scriptingEPSS 0.3%CVE-2026-105808MEDIUMSourceCodester Simple Student Information System searchresults.php clean cross site scriptingEPSS 0.3%CVE-2026-105807MEDIUMSourceCodester Simple Student Information System searchquery.php sql injectionEPSS 0.3%