CVE-2022-2706

A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown function of the file /pages/class_sched.php. The manipulation of the argument class with the input '||(SELECT 0x684d6b6c WHERE 5993=5993 AND (SELECT 2096 FROM(SELECT COUNT(*),CONCAT(0x717a786b71,(SELECT (ELT(2096=2096,1))),0x717a626271,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a))||' leads to sql injection. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-205830 is the identifier assigned to this vulnerability.

• CWE-89

• https://github.com/anx0ing/CVE_demo/blob/main/2022/Online%20Class%20and%20Exam%20Scheduling%20System-SQL%20injections.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205830Permissions Required, Third Party Advisory
• https://github.com/anx0ing/CVE_demo/blob/main/2022/Online%20Class%20and%20Exam%20Scheduling%20System-SQL%20injections.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205830Permissions Required, Third Party Advisory

Published

Aug 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27048A vulnerability has been discovered in Moxa MGate which allo…7.4
• CVE-2022-27049Raidrive before v2021.12.35 allows attackers to arbitrarily …2
• CVE-2022-2705A vulnerability was found in SourceCodester Simple Student I…9.8
• CVE-2022-27050BitComet Service for Windows before version 1.8.6 contains a…7.8
• CVE-2022-27052FreeFtpd version 1.0.13 and below contains an unquoted servi…7.8
• CVE-2022-27055ecjia-daojia 1.38.1-20210202629 is vulnerable to information…7.5
• CVE-2022-27061AeroCMS v0.0.1 was discovered to contain an arbitrary file u…7.2
• CVE-2022-27062AeroCMS v0.0.1 was discovered to contain a stored cross-site…4.8
• CVE-2022-27063AeroCMS v0.0.1 was discovered to contain a stored cross-site…6.1
• CVE-2022-27064Musical World v1 was discovered to contain an arbitrary file…8.8
• CVE-2022-2707A vulnerability classified as critical was found in SourceCo…9.8
• CVE-2022-27076Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a co…9.8