CVE-2022-3471: SourceCodester Human Resource Management System city.php sql injection
A vulnerability was found in SourceCodester Human Resource Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file city.php. The manipulation of the argument searccity leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-210715.
Affected Software
Event History
Frequently Asked Questions
What is the vulnerability ID for this vulnerability?
The vulnerability ID for this vulnerability is CVE-2022-3471.
What is the severity of CVE-2022-3471?
The severity of CVE-2022-3471 is medium.
What is the affected software for CVE-2022-3471?
The affected software for CVE-2022-3471 is SourceCodester Human Resource Management System.
What is the description of CVE-2022-3471?
CVE-2022-3471 is a vulnerability in SourceCodester Human Resource Management System that allows remote SQL injection through the 'searccity' argument in the 'city.php' file.
How can the vulnerability CVE-2022-3471 be exploited?
The vulnerability CVE-2022-3471 can be exploited by manipulating the 'searccity' argument in the 'city.php' file to perform SQL injection attacks.