CVE-2022-3472: fallo de gravedad media en SourceCodester Human Resource Management System
SourceCodester Human Resource Management System city.php sql injection
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 0.6%
A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file city.php. The manipulation of the argument cityedit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210716.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Human Resource Management SystemCVEs relacionadas — SourceCodester Human Resource Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-3492MEDIUMSourceCodester Human Resource Management System Profile Photo os command injectionEPSS 1.0%CVE-2022-4273HIGHSourceCodester Human Resource Management System Content-Type employee.php unrestricted uploadEPSS 0.8%CVE-2023-3391MEDIUMSourceCodester Human Resource Management System detailview.php sql injectionEPSS 0.7%CVE-2022-4278MEDIUMSourceCodester Human Resource Management System employeeadd.php sql injectionEPSS 0.7%CVE-2022-3473MEDIUMSourceCodester Human Resource Management System getstatecity.php sql injectionEPSS 0.7%CVE-2022-3470MEDIUMSourceCodester Human Resource Management System getstatecity.php sql injectionEPSS 0.6%