CVE-2022-2715

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in SourceCodester Employee Management System and classified as critical. This vulnerability affects unknown code of the file eloginwel.php. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-205834 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Aug 9, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-271525.7Roku devices running RokuOS v9.4.0 build 4200 or earlier that uses a Realtek WiFi chip is vulnerable to Arbitrary file modification.CVE-2022-271565.4Daylight Studio Fuel CMS 1.5.1 is vulnerable to HTML Injection.CVE-2022-271579.8pearweb < 1.32 is suffers from a Weak Password Recovery Mechanism via include/users/passwordmanage.php.CVE-2022-271589.8pearweb < 1.32 suffers from Deserialization of Untrusted Data.CVE-2022-27165.4The Beaver Builder – WordPress Page Builder for WordPress is vulnerable to Stored Cross-Site Scripting via the 'Text Editor' block in versio CVE-2022-271619.8Csz Cms 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_viewUsers CVE-2022-271629.8CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Members_editUser CVE-2022-271639.8CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_editUser CVE-2022-271649.8CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Users_viewUsers CVE-2022-271659.8CSZ CMS 1.2.2 is vulnerable to SQL Injection via cszcms_admin_Plugin_manager_setstatus CVE-2022-271666.1A carefully crafted request on XHRHtml2Markup.jsp could trigger an XSS vulnerability on Apache JSPWiki up to and including 2.11.2, which cou CVE-2022-271677.1Privilege escalation vulnerability in Windows products of ESET, spol. s r.o. allows attacker to exploit "Repair" and "Uninstall" features wh