CVE-2022-3583

HIGH

SourceCodester Canteen Management System 1.0 - SQL Injection

Title source: llm

Description

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been declared as critical. This vulnerability affects unknown code of the file login.php. The manipulation of the argument business leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-211192.

References (2)

[Exploit, Third Party Advisory] https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql1.md

View Exploit ZIP pw:eip

[Permissions Required] https://vuldb.com/?id.211192

Scores

CVSS v3 7.3

EPSS 0.0029

EPSS Percentile 52.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable yes

Technical Impact partial

Details

CWE

CWE-89 CWE-707

Status published

Products (1)

canteen_management_system_project/canteen_management_system 1.0

Published Oct 18, 2022

Tracked Since Feb 18, 2026