CVE-2022-2467

A vulnerability has been found in SourceCodester Garage Management System 1.0 and classified as critical. This vulnerability affects unknown code of the file /login.php. The manipulation of the argument username with the input 1@a.com' AND (SELECT 6427 FROM (SELECT(SLEEP(5)))LwLu) AND 'hsvT'='hsvT leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

• CWE-89
• CWE-89

• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Garage-Management-System.mdExploit, Third Party Advisory
• https://vuldb.com/?id.204160Exploit, Third Party Advisory
• https://github.com/xiahao90/CVEproject/blob/main/xiahao.webray.com.cn/Garage-Management-System.mdExploit, Third Party Advisory
• https://vuldb.com/?id.204160Exploit, Third Party Advisory

Published

Jul 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-24664PHP Everywhere <= 2.0.3 included functionality that allowed …8.8
• CVE-2022-24665PHP Everywhere <= 2.0.3 included functionality that allowed …8.8
• CVE-2022-24666A program using swift-nio-http2 is vulnerable to a denial of…7.5
• CVE-2022-24667A program using swift-nio-http2 is vulnerable to a denial of…7.5
• CVE-2022-24668A program using swift-nio-http2 is vulnerable to a denial of…7.5
• CVE-2022-24669It may be possible to gain some details of the deployment th…6.5
• CVE-2022-24670An attacker can use the unrestricted LDAP queries to determi…6.5
• CVE-2022-24671A link following privilege escalation vulnerability in Trend…7.8
• CVE-2022-24672This vulnerability allows network-adjacent attackers to exec…8.8
• CVE-2022-24673This vulnerability allows remote attackers to execute arbitr…9.8
• CVE-2022-24674This vulnerability allows network-adjacent attackers to exec…8.8
• CVE-2022-24675encoding/pem in Go before 1.17.9 and 1.18.x before 1.18.1 ha…7.5