Paper/Archive/CVE-2022-2648

CVE-2022-2648

SourceCodester Multi Language Hotel Management Software — SourceCodester Multi Language Hotel Management Software sql injection

EPSS 0.9%public exploit CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (NVD)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 59.5.595 × 2011.9 Exploit: SSVC poc+1010.0 SSVC exploitation: poc+100.0

Description · from the CVE record

A vulnerability was found in SourceCodester Multi Language Hotel Management Software. It has been rated as critical. This issue affects some unknown processing. The manipulation of the argument room_id leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205595.

Affected

ProductAffectedFixed inSource

Multi Language Hotel Management Softwaren/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

VulDB (CNA)6.3CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CISA ADPSSVCExploitation: poc · Automatable: no · Technical impact: partial

References

refgithub.com/gdianq/Sparkz-Hotel-Management-Sqlinjection/tree/main refvuldb.com/?id.205595