CVE-2022-3579 - SourceCodester Cashier Queuing System Login Page login.php sql injection · CoreCVE

Back Back to CVE browser

CRITICAL

SourceCodester Cashier Queuing System Login Page login.php sql injection

Published Oct 18, 2022

9.8

CRITICAL

CVSS 3.1

EPSS 0.71%

Description

A vulnerability classified as critical was found in SourceCodester Cashier Queuing System 1.0. This vulnerability affects unknown code of the file /queuing/login.php of the component Login Page. The manipulation of the argument username/password leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-211186 is the identifier assigned to this vulnerability.

Affected products

Vendor SourceCodester Product Cashier Queuing System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

Cashier Queuing System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (2)

CWE-707

CWE-89

SQL Injection

References (2)

https://github.com/DisguisedRoot/Exploit/blob/main/SQLInj/POC
ExploitThird Party Advisory
https://vuldb.com/?id.211186
Third Party Advisory

Link	Providers	Tags
https://github.com/DisguisedRoot/Exploit/blob/main/SQLInj/POC		ExploitThird Party Advisory
https://vuldb.com/?id.211186		Third Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Oct 18, 2022

Updated Nov 20, 2024

Reserved Oct 18, 2022

Link CVE-2022-3579

CISA Vulnrichment

Updated Nov 20, 2024

Status Modified

Modified Jun 17, 2026

Link CVE-2022-3579

Severity n/a

Public date n/a

Links CVE-2022-3579