PT-2023-12876

CVE-2022-2666

·

Published

2023-01-07

·

Updated

2024-11-26

Description by

CVSS 3.1
9.8
Critical
MetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SourceCodester Loan Management System (affected versions not specified)
Description A critical issue has been found in the SourceCodester Loan Management System, affecting the file login.php. The manipulation of the username argument leads to SQL injection. This issue can be initiated remotely.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.
Exploitability
Exploit
Impacts
Researchers
Vendors
Affected products
Weakness enumeration
CWE-89: Improper Neutralization of Special Elements used in an SQL Command (\'SQL Injection\')
Related identifiers
CVE-2022-2666
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com