CVE-2022-2801

MEDIUM

SourceCodester Automated Beer Parlour Billing System - SQL Injection

Title source: llm

Description

A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206247.

References (1)

Core 1

Core References

Third Party Advisory, VDB Entry x_refsource_misc

https://vuldb.com/?id.206247

Scores

CVSS v3 6.3

EPSS 0.0053

EPSS Percentile 40.9%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation none

Automatable no

Technical Impact partial

Details

CWE

CWE-89

Status published

Products (1)

automated_beer_parlour_billing_system_project/automated_beer_parlour_billing_system

Published Aug 12, 2022

Tracked Since Feb 18, 2026