CVE-2022-3472

MediumCVSS 4.9/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Human Resource Management System. It has been rated as critical. Affected by this issue is some unknown functionality of the file city.php. The manipulation of the argument cityedit leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-210716.

Metrics

CVSS 3.1 4.9/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-707CWE-89

Affected software

VendorProductVersions
SourceCodesterHuman Resource Management Systemn/a

References

Timeline

Published
Oct 13, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-347207.5Windows Internet Key Exchange (IKE) Extension Denial of Service VulnerabilityCVE-2022-347219.8Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityCVE-2022-347229.8Windows Internet Key Exchange (IKE) Protocol Extensions Remote Code Execution VulnerabilityCVE-2022-347235.5Windows DPAPI (Data Protection Application Programming Interface) Information Disclosure VulnerabilityCVE-2022-347247.5Windows DNS Server Denial of Service VulnerabilityCVE-2022-347257.0Windows ALPC Elevation of Privilege VulnerabilityCVE-2022-347268.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-347278.8Microsoft ODBC Driver Remote Code Execution VulnerabilityCVE-2022-347285.5Windows Graphics Component Information Disclosure VulnerabilityCVE-2022-347297.8Windows GDI Elevation of Privilege VulnerabilityCVE-2022-34736.5A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of thCVE-2022-347308.8Microsoft ODBC Driver Remote Code Execution Vulnerability
CVE-2022-3472: Medium severity, CVSS 4.9 | Vulnix