CVE-2022-3332
SourceCodester Food Ordering Management System POST Parameter router.php sql injection
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
1Exploited in Wild
-Decision
Descriptions
A vulnerability classified as critical has been found in SourceCodester Food Ordering Management System. This affects an unknown part of the file router.php of the component POST Parameter Handler. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-209583.
Se ha encontrado una vulnerabilidad clasificada como crítica en SourceCodester Food Ordering Management System. Afecta a una parte desconocida del archivo router.php del componente POST Parameter Handler. La manipulación del argumento nombre de usuario conlleva a una inyección sql. Es posible iniciar el ataque de forma remota. La explotación ha sido divulgada al público y puede ser usada. El identificador asociado a esta vulnerabilidad es VDB-209583
CVSS Scores
SSVC
- Decision:-
Timeline
- 2022-09-27 CVE Reserved
- 2022-09-28 CVE Published
- 2024-04-20 EPSS Updated
- 2024-08-03 CVE Updated
- 2024-08-03 First Exploit
- ---------- Exploited in Wild
- ---------- KEV Due Date
CWE
- CWE-707: Improper Neutralization
CAPEC
References (2)
URL | Tag | Source |
---|---|---|
https://vuldb.com/?id.209583 | Third Party Advisory |
URL | Date | SRC |
---|---|---|
https://github.com/vuls/vuls/blob/main/Food%20Ordering%20Management%20System%20router.php%20SQL%20Injection.pdf | 2024-08-03 |
URL | Date | SRC |
---|
URL | Date | SRC |
---|
Affected Vendors, Products, and Versions
Vendor | Product | Version | Other | Status | ||||||
---|---|---|---|---|---|---|---|---|---|---|
Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
Food Ordering Management System Project Search vendor "Food Ordering Management System Project" | Food Ordering Management System Search vendor "Food Ordering Management System Project" for product "Food Ordering Management System" | - | - |
Affected
|