CVE-2022-2707

A vulnerability classified as critical was found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected by this vulnerability is an unknown functionality of the file /pages/faculty_sched.php. The manipulation of the argument faculty with the input ' OR (SELECT 2078 FROM(SELECT COUNT(*),CONCAT(0x716a717071,(SELECT (ELT(2078=2078,1))),0x717a706a71,FLOOR(RAND(0)*2))x FROM INFORMATION_SCHEMA.PLUGINS GROUP BY x)a)-- uYCM leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-205831.

• CWE-89

• https://github.com/anx0ing/CVE_demo/blob/main/2022/Online%20Class%20and%20Exam%20Scheduling%20System-SQL%20injections.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205831Third Party Advisory
• https://github.com/anx0ing/CVE_demo/blob/main/2022/Online%20Class%20and%20Exam%20Scheduling%20System-SQL%20injections.mdExploit, Third Party Advisory
• https://vuldb.com/?id.205831Third Party Advisory

Published

Aug 8, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27055ecjia-daojia 1.38.1-20210202629 is vulnerable to information…7.5
• CVE-2022-2706A vulnerability classified as critical has been found in Sou…9.8
• CVE-2022-27061AeroCMS v0.0.1 was discovered to contain an arbitrary file u…7.2
• CVE-2022-27062AeroCMS v0.0.1 was discovered to contain a stored cross-site…4.8
• CVE-2022-27063AeroCMS v0.0.1 was discovered to contain a stored cross-site…6.1
• CVE-2022-27064Musical World v1 was discovered to contain an arbitrary file…8.8
• CVE-2022-27076Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a co…9.8
• CVE-2022-27077Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a co…9.8
• CVE-2022-27078Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a co…9.8
• CVE-2022-27079Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a co…9.8
• CVE-2022-2708A vulnerability, which was classified as critical, was found…9.8
• CVE-2022-27080Tenda M3 1.10 V1.0.0.12(4856) was discovered to contain a co…9.8