CVE-2022-4737

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Blood Bank Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file login.php. The manipulation of the argument username/password leads to sql injection. The attack may be initiated remotely. The identifier VDB-216773 was assigned to this vulnerability.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
SourceCodester	Blood Bank Management System	1.0

References

https://vuldb.com/?ctiid.216773Third Party Advisory
https://vuldb.com/?id.216773Third Party Advisory
https://vuldb.com/?ctiid.216773Third Party Advisory
https://vuldb.com/?id.216773Third Party Advisory

Timeline

Published: Dec 25, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-473705.5In wlan driver, there is a possible missing params check. This could lead to local denial of service in wlan services.CVE-2022-473715.5In bt driver, there is a thread competition leads to early release of resources to be accessed. This could lead to local denial of service i CVE-2022-473725.4Stored cross-site scripting vulnerability in the Create event section in Pandora FMS Console v766 and lower. An attacker typically exploits CVE-2022-473736.1Reflected Cross Site Scripting in Search Functionality of Module Library in Pandora FMS Console v766 and lower. This vulnerability arises on CVE-2022-473747.5A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CVE-2022-473757.5A vulnerability has been identified in SIMATIC PC-Station Plus (All versions), SIMATIC S7-400 CPU 412-2 PN V7 (All versions), SIMATIC S7-400 CVE-2022-473767.3The Alaris Infusion Central software, versions 1.1 to 1.3.2, may contain a recoverable password after the installation. No patient health da CVE-2022-473779.8Password recovery vulnerability in SICK SIM2000ST Partnumber 2086502 with firmware version <1.13.4 allows an unprivileged remote attacker to CVE-2022-473786.5Multiple CODESYS products in multiple versions are prone to a improper input validation vulnerability. An authenticated remote attacker may CVE-2022-473798.8An authenticated, remote attacker may use a out-of-bounds write vulnerability in multiple CODESYS products in multiple versions to write dat CVE-2022-47386.1A vulnerability classified as problematic has been found in SourceCodester Blood Bank Management System 1.0. Affected is an unknown function CVE-2022-473808.8An authenticated remote attacker may use a stack based out-of-bounds write vulnerability in multiple CODESYS products in multiple versions