CVE-2022-4222

MEDIUM

Canteen Management System - SQL Injection via ajax_invoice.php POST Request Handler

Title source: llm
STIX 2.1

Description

A vulnerability was found in SourceCodester Canteen Management System. It has been rated as critical. This issue affects the function query of the file ajax_invoice.php of the component POST Request Handler. The manipulation of the argument search leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214523.

References (2)

Core 2
Core References
Third Party Advisory, VDB Entry
https://vuldb.com/?id.214523
Exploit, Third Party Advisory
https://www.jianshu.com/p/bda61089bf1d

Scores

CVSS v3 5.0
EPSS 0.0066
EPSS Percentile 46.6%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA SSVC

Vulnrichment
Exploitation poc
Automatable no
Technical Impact partial

Details

CWE
CWE-89 CWE-707
Status published
Products (1)
canteen_management_system_project/canteen_management_system 1.0
Published Nov 30, 2022
Tracked Since Feb 18, 2026