CVE-2022-3868

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical has been found in SourceCodester Sanitization Management System. Affected is an unknown function of the file /php-sms/classes/Master.php?f=save_quote. The manipulation of the argument id leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-213012.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707

Affected software

No affected versions have been published.

Timeline

Published
Nov 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-386805.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-386815.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-386825.5In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional CVE-2022-386835.5In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional CVE-2022-386845.5In contacts service, there is a missing permission check. This could lead to local denial of service in contacts service with no additional CVE-2022-386855.5In bluetooth service, there is a possible missing permission check. This could lead to local denial of service in bluetooth service with no CVE-2022-386865.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-386875.5In messaging service, there is a missing permission check. This could lead to local denial of service in messaging service with no additionaCVE-2022-386885.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2022-386895.5In telephony service, there is a missing permission check. This could lead to local information disclosure with no additional execution privCVE-2022-38696.1Code Injection in GitHub repository froxlor/froxlor prior to 0.10.38.2.CVE-2022-386905.5In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.
CVE-2022-3868: Critical severity, CVSS 9.8 | Vulnix