CVE-2022-2677

MEDIUM

Apartment Visitors Management System - SQL Injection

Title source: rule
STIX 2.1

Description

A vulnerability was found in SourceCodester Apartment Visitor Management System 1.0. It has been classified as critical. This affects an unknown part of the file index.php. The manipulation of the argument username with the input ' AND (SELECT 4955 FROM (SELECT(SLEEP(5)))RSzF) AND 'htiy'='htiy leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205665 was assigned to this vulnerability.

References (2)

Core 2
Core References
Permissions Required, Third Party Advisory x_refsource_misc
https://vuldb.com/?id.205665

Scores

CVSS v3 6.3
EPSS 0.0031
EPSS Percentile 54.1%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-89
Status published
Products (1)
apartment_visitors_management_system_project/apartment_visitors_management_system 1.0
Published Aug 05, 2022
Tracked Since Feb 18, 2026