CVE-2022-2724

A vulnerability was found in SourceCodester Employee Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /process/aprocess.php. The manipulation of the argument mailuid leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205837 was assigned to this vulnerability.

• CWE-89

• https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20aprocess.php%20SQL%20Injection/Exploit, Third Party Advisory
• https://vuldb.com/?id.205837Third Party Advisory, VDB Entry
• https://bewhale.github.io/post/PHP%E4%BB%A3%E7%A0%81%E5%AE%A1%E8%AE%A1%E2%80%94Employee%20Management%20System%20aprocess.php%20SQL%20Injection/Exploit, Third Party Advisory
• https://vuldb.com/?id.205837Third Party Advisory, VDB Entry

Published

Aug 9, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27233XML injection in the Quartus(R) Prime Programmer included in…7.5
• CVE-2022-27234Server-side request forgery in the CVAT software maintained …6.5
• CVE-2022-27235Multiple Broken Access Control vulnerabilities in Social Sha…8.8
• CVE-2022-27237There is a cross-site scripting (XSS) vulnerability in an NI…6.1
• CVE-2022-27238BigBlueButton version 2.4.7 (or earlier) is vulnerable to st…5.4
• CVE-2022-27239In cifs-utils through 6.14, a stack-based buffer overflow wh…7.8
• CVE-2022-27240scheme/webauthn.c in Glewlwyd SSO server 2.x before 2.6.2 ha…9.8
• CVE-2022-27241A vulnerability has been identified in Mendix Applications u…7.5
• CVE-2022-27242A vulnerability has been identified in OpenV2G (V0.9.4). The…5.5
• CVE-2022-27243An issue was discovered in MISP before 2.4.156. app/View/Use…7.8
• CVE-2022-27244An issue was discovered in MISP before 2.4.156. A malicious …4.8
• CVE-2022-27245An issue was discovered in MISP before 2.4.156. app/Model/Se…8.8