CVE-2022-4051

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability has been found in Hostel Searching Project and classified as critical. This vulnerability affects unknown code of the file view-property.php. The manipulation of the argument property_id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-213844.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Nov 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-405109.8Memory corruption due to buffer copy without checking size of input in Audio while voice call with EVS vocoder.CVE-2022-405127.5Transient DOS in WLAN Firmware due to buffer over-read while processing probe response or beacon.CVE-2022-405137.5Transient DOS due to uncontrolled resource consumption in WLAN firmware when peer is freed in non qos state.CVE-2022-405149.8Memory corruption due to buffer copy without checking the size of input in WLAN Firmware while processing CCKM IE in reassoc response frame.CVE-2022-405159.8Memory corruption in Video due to double free while playing 3gp clip with invalid metadata atoms.CVE-2022-405167.8Memory corruption in Core due to stack-based buffer overflow.CVE-2022-405177.8Memory corruption in core due to stack-based buffer overflow CVE-2022-405185.5Information disclosure due to buffer overread in Core CVE-2022-405195.5Information disclosure due to buffer overread in Core CVE-2022-40527.2A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of CVE-2022-405207.8Memory corruption due to stack-based buffer overflow in Core CVE-2022-405217.5Transient DOS due to improper authorization in Modem