CVE-2022-3130

· HIGHModified

← All CVEs

CVSS v3.1

7.3

EPSS

0.79%

Published

Sep 7, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability classified as critical has been found in codeprojects Online Driving School. This affects an unknown part of the file /login.php. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-207873 was assigned to this vulnerability.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-89

Affected Products (1)

online_driving_school_project_project · online_driving_school_projectvulnerable

References (4)

https://github.com/KingBridgeSS/Online_Driving_School_Project_In_PHP_With_Source_Code_Vulnerabilities/blob/main/sql_injection.md

ExploitThird Party Advisory

https://vuldb.com/?id.207873

Third Party AdvisoryVDB Entry

https://github.com/KingBridgeSS/Online_Driving_School_Project_In_PHP_With_Source_Code_Vulnerabilities/blob/main/sql_injection.md

ExploitThird Party Advisory

https://vuldb.com/?id.207873

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs