CVE-2022-2727: SourceCodester Gym Management System login.php sql injection
A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/login.php. The manipulation of the argument adminemail/adminpass leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205855.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-2727?
CVE-2022-2727 is a critical vulnerability found in SourceCodester Gym Management System that allows SQL injection through the manipulation of the admin_email/admin_pass arguments in the /mygym/admin/login.php file.
What is the severity of CVE-2022-2727?
CVE-2022-2727 has a severity rating of 9.8 (critical).
How does CVE-2022-2727 affect Gym Management System Project?
CVE-2022-2727 affects the functionality of the Gym Management System Project by allowing SQL injection through the /mygym/admin/login.php file.
How can I fix CVE-2022-2727 in Gym Management System Project?
To fix CVE-2022-2727 in Gym Management System Project, it is recommended to apply the latest patch or update provided by SourceCodester.
Can you provide more information about CVE-2022-2727?
CVE-2022-2727 is a critical vulnerability that was found in the SourceCodester Gym Management System, allowing SQL injection through the admin_email/admin_pass arguments in the /mygym/admin/login.php file. It has a severity rating of 9.8 and affects the Gym Management System Project.