CVE-2022-4052

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was found in Student Attendance Management System and classified as critical. This issue affects some unknown processing of the file /Admin/createClass.php. The manipulation of the argument Id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-213845 was assigned to this vulnerability.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Nov 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-405207.8Memory corruption due to stack-based buffer overflow in Core CVE-2022-405217.5Transient DOS due to improper authorization in Modem CVE-2022-405227.8Memory corruption in Linux Networking due to double free while handling a hyp-assign.CVE-2022-405235.5Information disclosure in Kernel due to indirect branch misprediction.CVE-2022-405247.8Memory corruption due to buffer over-read in Modem while processing SetNativeHandle RTP service.CVE-2022-405255.5Information disclosure in Linux Networking Firmware due to unauthorized information leak during side channel analysis.CVE-2022-405277.5Transient DOS due to reachable assertion in WLAN while processing PEER ID populated by TQM.CVE-2022-405297.8Memory corruption due to improper access control in kernel while processing a mapping request from root process.CVE-2022-40534.8A vulnerability was found in Student Attendance Management System. It has been classified as problematic. Affected is an unknown function of CVE-2022-405307.8Memory corruption in WLAN due to integer overflow to buffer overflow in WLAN during initialization phase.CVE-2022-405317.8Memory corruption in WLAN due to incorrect type cast while sending WMI_SCAN_SCH_PRIO_TBL_CMDID message.CVE-2022-405327.8Memory corruption due to integer overflow or wraparound in WLAN while sending WMI cmd from host to target.