Critical severity · published Aug 4, 2022
CVE-2022-2643
SourceCodester Online Admission System POST Parameter sql injection
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability has been found in SourceCodester Online Admission System and classified as critical. This vulnerability affects unknown code of the component POST Parameter Handler. The manipulation of the argument shift leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this entry is VDB-205564.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 59% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OA
Online Admission System · SourceCodester
All versions, or not specified · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-2643
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-2643
Exploit
https://github.com/badboycxcc/Student-Admission-Sqlinjection
Third Party Advisory
https://vuldb.com/?id.205564
More from Online Admission System
9.8
CVE-2022-2644
SourceCodester Online Admission System GET Parameter sql injection
7.3
CVE-2026-4625
SourceCodester Online Admission System programmes.php sql injection
6.1
CVE-2022-2767
SourceCodester Online Admission System index.php cross site scripting
6.1
CVE-2022-2646
SourceCodester Online Admission System index.php cross site scripting