CVE-2022-2672

A vulnerability was found in SourceCodester Garage Management System. It has been classified as critical. Affected is an unknown function of the file createUser.php. The manipulation of the argument userName/uemail leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205656.

• CWE-89

• https://vuldb.com/?id.205656Third Party Advisory
• https://vuldb.com/?id.205656Third Party Advisory

Published

Aug 5, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-26714A memory corruption issue was addressed with improved valida…7.8
• CVE-2022-26715An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2022-26716A memory corruption issue was addressed with improved state …8.8
• CVE-2022-26717A use after free issue was addressed with improved memory ma…8.8
• CVE-2022-26718An out-of-bounds read issue was addressed with improved inpu…7.8
• CVE-2022-26719A memory corruption issue was addressed with improved state …8.8
• CVE-2022-26720An out-of-bounds write issue was addressed with improved bou…7.8
• CVE-2022-26721A memory initialization issue was addressed. This issue is f…7.8
• CVE-2022-26722A memory initialization issue was addressed. This issue is f…7.8
• CVE-2022-26723A memory corruption issue was addressed with improved input …9.8
• CVE-2022-26724An authentication issue was addressed with improved state ma…5.5
• CVE-2022-26725A logic issue was addressed with improved state management. …5.3