CVE-2022-2842: SourceCodester Gym Management System login.php sql injection
A vulnerability classified as critical has been found in SourceCodester Gym Management System. This affects an unknown part of the file login.php. The manipulation of the argument useremail leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-206451.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2022-2842?
CVE-2022-2842 is a critical vulnerability found in SourceCodester Gym Management System that allows for SQL injection through the user_email argument in the login.php file.
How severe is CVE-2022-2842?
CVE-2022-2842 is classified as critical with a severity rating of 9.8.
Which software is affected by CVE-2022-2842?
The Gym Management System Project Gym Management System is affected by CVE-2022-2842.
How can CVE-2022-2842 be exploited?
CVE-2022-2842 can be exploited remotely by manipulating the user_email argument in the login.php file.
Are there any references for CVE-2022-2842?
Yes, you can find more information about CVE-2022-2842 in the following references: [link 1](https://github.com/WhiteA1so/CVE/blob/main/Gym%20Management%20System-loginpage-Sqlinjection.pdf) and [link 2](https://vuldb.com/?id.206451)