CVE-2022-2656

MEDIUM

SourceCodester Multi Language Hotel Management Software - SQL Injec...

Title source: llm
STIX 2.1

Description

A vulnerability classified as critical has been found in SourceCodester Multi Language Hotel Management Software. Affected is an unknown function. The manipulation of the argument email leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205596.

References (2)

Core 2
Core References
Permissions Required, Third Party Advisory x_refsource_misc
https://vuldb.com/?id.205596

Scores

CVSS v3 6.3
EPSS 0.0065
EPSS Percentile 46.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-89
Status published
Products (1)
multi_language_hotel_management_software_project/multi_language_hotel_management_software
Published Aug 04, 2022
Tracked Since Feb 18, 2026