CVE-2022-2705

A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknown processing of the file admin/departments/manage_department.php. The manipulation of the argument id with the input -5756%27%20UNION%20ALL%20SELECT%20NULL,database(),user(),NULL,NULL,NULL,NULL--%20- leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205829 was assigned to this vulnerability.

• CWE-89

• https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Simple%20Student%20Information%20System/Exploit, Third Party Advisory
• https://vuldb.com/?id.205829Third Party Advisory
• https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Simple%20Student%20Information%20System/Exploit, Third Party Advisory
• https://vuldb.com/?id.205829Third Party Advisory

Published

Aug 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27043Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 …7.5
• CVE-2022-27044libsixel 1.8.6 is affected by Buffer Overflow in libsixel/sr…8.8
• CVE-2022-27046libsixel 1.8.6 suffers from a Heap Use After Free vulnerabil…8.8
• CVE-2022-27047mogu_blog_cms 5.2 suffers from upload arbitrary files withou…9.8
• CVE-2022-27048A vulnerability has been discovered in Moxa MGate which allo…7.4
• CVE-2022-27049Raidrive before v2021.12.35 allows attackers to arbitrarily …2
• CVE-2022-27050BitComet Service for Windows before version 1.8.6 contains a…7.8
• CVE-2022-27052FreeFtpd version 1.0.13 and below contains an unquoted servi…7.8
• CVE-2022-27055ecjia-daojia 1.38.1-20210202629 is vulnerable to information…7.5
• CVE-2022-2706A vulnerability classified as critical has been found in Sou…9.8
• CVE-2022-27061AeroCMS v0.0.1 was discovered to contain an arbitrary file u…7.2
• CVE-2022-27062AeroCMS v0.0.1 was discovered to contain a stored cross-site…4.8