CVE-2022-4253

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Canteen Management System. It has been declared as problematic. This vulnerability affects the function builtin_echo of the file customer.php. The manipulation leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214630 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707

Affected software

No affected versions have been published.

Timeline

Published
Dec 1, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-425304.4In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure witCVE-2022-425317.8In mmu_map_for_fw of gs_ldfw_load.c, there is a possible mitigation bypass due to Permissive Memory Allocation. This could lead to local escCVE-2022-425324.4In Pixel firmware, there is a possible out of bounds read due to a missing bounds check. This could lead to local information disclosure witCVE-2022-425337.8In shared_metadata_init of SharedMetadata.cpp, there is a possible out of bounds write due to an integer overflow. This could lead to local CVE-2022-425347.8In trusty_ffa_mem_reclaim of shared-mem-smcall.c, there is a possible privilege escalation due to improper input validation. This could leadCVE-2022-425355.5In a query in MmsSmsProvider.java, there is a possible access to restricted tables due to SQL injection. This could lead to local informatioCVE-2022-425369.8Remote code executionCVE-2022-425379.8Remote code executionCVE-2022-425389.8Elevation of privilegeCVE-2022-425397.5Information disclosureCVE-2022-42548.8sssd: libsss_certmap fails to sanitise certificate data used in LDAP filtersCVE-2022-425409.8Elevation of privilege