CVE-2022-2646

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8</h3><script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205572.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

No affected versions have been published.

Timeline

Published
Aug 4, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-264606.7In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2022-264616.7In vow, there is a possible undefined behavior due to an API misuse. This could lead to local escalation of privilege with System execution CVE-2022-264624.4In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SystemCVE-2022-264634.4In vow, there is a possible out of bounds read due to an incorrect bounds check. This could lead to local information disclosure with SystemCVE-2022-264646.7In vow, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SystCVE-2022-264656.7In audio ipi, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege witCVE-2022-264666.7In audio ipi, there is a possible out of bounds write due to an integer overflow. This could lead to local escalation of privilege with SystCVE-2022-264676.7In rpmb, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with SysCVE-2022-264686.6In preloader (usb), there is a possible out of bounds write due to a missing bounds check. This could lead to local escalation of privilege,CVE-2022-264697.8In MtkEmail, there is a possible escalation of privilege due to fragment injection. This could lead to local escalation of privilege with noCVE-2022-26479.8A vulnerability was found in jeecg-boot. It has been declared as critical. This vulnerability affects unknown code of the file /api/. The maCVE-2022-264706.7In aie, there is a possible out of bounds write due to an incorrect bounds check. This could lead to local escalation of privilege with Syst
CVE-2022-2646: Medium severity, CVSS 6.1 | Vulnix