CVE-2022-4277

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in Shaoxing Background Management System. It has been declared as critical. This vulnerability affects unknown code of the file /Default/Bd. The manipulation of the argument id leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-214774 is the identifier assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707CWE-89

Affected software

VendorProductVersions
ShaoxingBackground Management Systemn/a

References

Timeline

Published
Dec 3, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-427704.7In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.CVE-2022-427714.7In wlan driver, there is a race condition, This could lead to local denial of service in wlan services.CVE-2022-427725.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-427735.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-427745.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-427755.5In camera driver, there is a possible memory corruption due to improper locking. This could lead to local denial of service in kernel.CVE-2022-427767.8In UscAIEngine service, there is a missing permission check. This could lead to set up UscAIEngine service with no additional execution privCVE-2022-427777.8In power management service, there is a missing permission check. This could lead to set up power management service with no additional execCVE-2022-427787.8In windows manager service, there is a missing permission check. This could lead to set up windows manager service with no additional executCVE-2022-427795.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-42787.2A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unkCVE-2022-427805.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.
CVE-2022-4277: Critical severity, CVSS 9.8 | Vulnix