CVE-2022-3584

MEDIUM

SourceCodester Canteen Management System 1.0 - SQL Injection

Title source: llm

Description

A vulnerability was found in SourceCodester Canteen Management System 1.0. It has been rated as critical. This issue affects some unknown processing of the file edituser.php. The manipulation of the argument id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-211193 was assigned to this vulnerability.

References (2)

[Exploit, Third Party Advisory] https://github.com/joinia/webray.com.cn/blob/main/Canteen-Management-System/Canteensql2.md

View Exploit ZIP pw:eip

[Third Party Advisory] https://vuldb.com/?id.211193

Scores

CVSS v3 6.3

EPSS 0.0024

EPSS Percentile 47.5%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment

Exploitation poc

Automatable no

Technical Impact partial

Details

CWE

CWE-707

Status published

Products (1)

canteen_management_system_project/canteen_management_system 1.0

Published Oct 18, 2022

Tracked Since Feb 18, 2026