CVE-2022-3473: SourceCodester Human Resource Management System getstatecity.php sql injection
Published Oct 12, 2022
·Updated
A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file getstatecity.php. The manipulation of the argument ci leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-210717 was assigned to this vulnerability.
Affected Software
2 affected components
Human Resource Management System Project Human Resource Management System
oretnom23 Human Resource Management System
Event History
Oct 12, 2022
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is the severity of CVE-2022-3473?
CVE-2022-3473 is classified as a critical vulnerability.
2
How do I fix CVE-2022-3473?
You can mitigate CVE-2022-3473 by properly sanitizing the ci parameter input in the getstatecity.php file to prevent SQL injection.
3
What type of vulnerability is CVE-2022-3473?
CVE-2022-3473 is a SQL injection vulnerability.
4
Can CVE-2022-3473 be exploited remotely?
Yes, CVE-2022-3473 can be exploited remotely.
5
Which software is affected by CVE-2022-3473?
CVE-2022-3473 affects the SourceCodester Human Resource Management System.