CVE-2022-3470

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Human Resource Management System. It has been classified as critical. Affected is an unknown function of the file getstatecity.php. The manipulation of the argument sc leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-210714 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-707 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Oct 13, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-347008.8Microsoft Dynamics CRM (on-premises) Remote Code Execution Vulnerability CVE-2022-347017.5Windows Secure Socket Tunneling Protocol (SSTP) Denial of Service Vulnerability CVE-2022-347028.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution Vulnerability CVE-2022-347037.8Windows Partition Management Driver Elevation of Privilege Vulnerability CVE-2022-347044.7Windows Defender Credential Guard Information Disclosure Vulnerability CVE-2022-347057.8Windows Defender Credential Guard Elevation of Privilege Vulnerability CVE-2022-347067.8Windows Local Security Authority (LSA) Elevation of Privilege Vulnerability CVE-2022-347077.8Windows Kernel Elevation of Privilege Vulnerability CVE-2022-347085.5Windows Kernel Information Disclosure Vulnerability CVE-2022-347096.0Windows Defender Credential Guard Security Feature Bypass Vulnerability CVE-2022-34714.9A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected by this vulnerabili CVE-2022-347105.5Windows Defender Credential Guard Information Disclosure Vulnerability