CVE-2022-4278

HighCVSS 7.2/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Human Resource Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file /hrm/employeeadd.php. The manipulation of the argument empid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214775.

Metrics

CVSS 3.1 7.2/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-707 CWE-89

Affected software

No affected versions have been published.

Timeline

Published: Dec 3, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-427805.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-427815.5In wlan driver, there is a possible missing bounds check, This could lead to local denial of service in wlan services.CVE-2022-427825.5In wlan driver, there is a possible missing permission check, This could lead to local information disclosure.CVE-2022-427835.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-427846.8A vulnerability has been identified in LOGO! 12/24RCE (6ED1052-1MD08-0BA1) (All versions >= V8.3), LOGO! 12/24RCEo (6ED1052-2MD08-0BA1) (All CVE-2022-427859.8Multiple W&T products of the ComServer Series are prone to an authentication bypass. An unathenticated remote attacker, can log in without k CVE-2022-427865.4Multiple W&T Products of the ComServer Series are prone to an XSS attack. An authenticated remote Attacker can execute arbitrary web scripts CVE-2022-427878.8Multiple W&T products of the Comserver Series use a small number space for allocating sessions ids. After login of an user an unathenticated CVE-2022-427885.5A permissions issue existed. This issue was addressed with improved permission validation. This issue is fixed in macOS Ventura 13. A malici CVE-2022-427895.5An issue in code signature validation was addressed with improved checks. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, macOS CVE-2022-42796.1A vulnerability classified as problematic has been found in SourceCodester Human Resource Management System 1.0. Affected is an unknown func CVE-2022-427905.5A logic issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.7, macOS Ventura 13, iOS 16, iOS 15.7 an