CVE-2022-2774: SourceCodester Library Management System student.php sql injection
Published Aug 11, 2022
·Updated
A vulnerability was found in SourceCodester Library Management System. It has been declared as critical. This vulnerability affects unknown code of the file librarian/student.php. The manipulation of the argument title leads to sql injection. The attack can be initiated remotely. VDB-206170 is the identifier assigned to this vulnerability.
Affected Software
1 affected component
Library Management System Project Library Management System
Event History
Aug 11, 2022
CVE Published
via MITRE·11:51 AM
Data Sourced
via MITRE·11:51 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-2774?
CVE-2022-2774 has been declared as critical.
2
How does CVE-2022-2774 impact the Library Management System?
CVE-2022-2774 allows SQL injection through manipulation of the 'title' argument in the librarian/student.php file.
3
Can CVE-2022-2774 be exploited remotely?
Yes, CVE-2022-2774 can be exploited remotely.
4
What is the primary weakness associated with CVE-2022-2774?
The primary weakness associated with CVE-2022-2774 is SQL injection.
5
How can I mitigate the risks associated with CVE-2022-2774?
To mitigate the risks of CVE-2022-2774, sanitize and validate all user inputs in the affected file.