CVE-2022-2768

MediumCVSS 6.1/10Last modified Jun 17, 2026

Description

A vulnerability classified as problematic was found in SourceCodester Library Management System. This vulnerability affects unknown code of the file /qr/I/. The manipulation of the argument error leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-206164.

Metrics

CVSS 3.1 6.1/10CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Library Management System	n/a

References

https://vuldb.com/?id.206164Permissions Required, Third Party Advisory
https://vuldb.com/?id.206164Permissions Required, Third Party Advisory

Timeline

Published: Aug 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-27695.4A vulnerability, which was classified as problematic, has been found in SourceCodester Company Website CMS. This issue affects some unknown CVE-2022-27709.8A vulnerability, which was classified as critical, was found in SourceCodester Simple Online Book Store System. Affected is an unknown funct CVE-2022-27719.8A vulnerability has been found in SourceCodester Simple Online Book Store System and classified as critical. Affected by this vulnerability CVE-2022-27729.8A vulnerability was found in SourceCodester Apartment Visitor Management System and classified as critical. Affected by this issue is some u CVE-2022-27736.1A vulnerability was found in SourceCodester Apartment Visitor Management System. It has been classified as problematic. This affects an unkn CVE-2022-27749.8A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown CVE-2022-27755.5The Fast Flow WordPress plugin before 1.2.13 does not sanitise and escape some of its Widget settings, which could allow high privilege user CVE-2022-27765.3A vulnerability classified as problematic has been found in SourceCodester Gym Management System. Affected is an unknown function of the fil CVE-2022-27775.4Cross-site Scripting (XSS) - Stored in GitHub repository microweber/microweber prior to 1.3.1.CVE-2022-277727.8spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.s CVE-2022-277739.8A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execute commands with elev CVE-2022-277745.7An insufficiently protected credentials vulnerability exists in curl 4.9 to and include curl 7.82.0 are affected that could allow an attacke