ZeroHour

CVE-2022-3473

PoC
CVSS 3.1
6.5 medium
EPSS
<1%p46
Published
()
Modified
Description

A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file getstatecity.php. The manipulation of the argument ci leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-210717 was assigned to this vulnerability.

Vendors
oretnom23
Products
human resource management system
Weakness
CWE-707, CWE-89
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

In the news

No ingested article mentions this CVE yet.