CVE-2022-2667: SourceCodester Loan Management System delete_lplan.php sql injection
Published Aug 5, 2022
·Updated
A vulnerability was found in SourceCodester Loan Management System and classified as critical. This issue affects some unknown processing of the file deletelplan.php. The manipulation of the argument lplanid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205619.
Affected Software
2 affected components
Loan Management System Project Loan Management System
Razormist Loan Management System
Event History
Aug 5, 2022
CVE Published
via MITRE·10:45 AM
Data Sourced
via MITRE·10:45 AM
DescriptionSeverityWeakness
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the severity of CVE-2022-2667?
CVE-2022-2667 is classified as a critical vulnerability.
2
How do I fix CVE-2022-2667?
To fix CVE-2022-2667, ensure proper input validation and parameterized queries for the affected delete_lplan.php file.
3
What type of vulnerability is CVE-2022-2667?
CVE-2022-2667 is an SQL injection vulnerability.
4
Which systems are affected by CVE-2022-2667?
CVE-2022-2667 affects the Loan Management System from SourceCodester and Razormist.
5
Can CVE-2022-2667 be exploited remotely?
Yes, CVE-2022-2667 can be exploited remotely.