CVE-2022-3471

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file city.php. The manipulation of the argument searccity leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210715.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-707CWE-89

Affected software

No affected versions have been published.

Timeline

Published
Oct 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-347105.5Windows Defender Credential Guard Information Disclosure VulnerabilityCVE-2022-347117.8Windows Defender Credential Guard Elevation of Privilege VulnerabilityCVE-2022-347125.5Windows Defender Credential Guard Information Disclosure VulnerabilityCVE-2022-347137.8Microsoft Windows Support Diagnostic Tool (MSDT) Remote Code Execution VulnerabilityCVE-2022-347148.1Windows Secure Socket Tunneling Protocol (SSTP) Remote Code Execution VulnerabilityCVE-2022-347159.8Windows Network File System Remote Code Execution VulnerabilityCVE-2022-347165.9.NET Spoofing VulnerabilityCVE-2022-347178.8Microsoft Office Remote Code Execution VulnerabilityCVE-2022-347189.8Windows TCP/IP Remote Code Execution VulnerabilityCVE-2022-347197.8Windows Distributed File System (DFS) Elevation of Privilege VulnerabilityCVE-2022-34724.9A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some CVE-2022-347207.5Windows Internet Key Exchange (IKE) Extension Denial of Service Vulnerability
CVE-2022-3471: Medium severity, CVSS 4.9 | Vulnix