CVE-2022-2748

A vulnerability was found in SourceCodester Simple Online Book Store System. It has been classified as problematic. Affected is an unknown function of the file /admin/edit.php. The manipulation of the argument eid leads to cross site scripting. It is possible to launch the attack remotely. The identifier of this vulnerability is VDB-206016.

• CWE-79

• https://vuldb.com/?id.206016Third Party Advisory, VDB Entry
• https://vuldb.com/?id.206016Third Party Advisory, VDB Entry

Published

Aug 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27474SuiteCRM v7.11.23 was discovered to allow remote code execut…7.2
• CVE-2022-27475Cross site scripting (XSS) vulnerability in tramyardg hotel-…6.1
• CVE-2022-27476A cross-site scripting (XSS) vulnerability at /admin/goods/u…6.1
• CVE-2022-27477Newbee-Mall v1.0.0 was discovered to contain an arbitrary fi…9.8
• CVE-2022-27478Victor v1.0 was discovered to contain a remote code executio…8.8
• CVE-2022-27479Apache Superset before 1.4.2 is vulnerable to SQL injection …9.8
• CVE-2022-27480A vulnerability has been identified in SICAM A8000 CP-8031 (…7.5
• CVE-2022-27481A vulnerability has been identified in SCALANCE W1788-1 M12 …5.3
• CVE-2022-27482A improper neutralization of special elements used in an os …7.8
• CVE-2022-27483A improper neutralization of special elements used in an os …7.2
• CVE-2022-27484A unverified password change in Fortinet FortiADC version 6.…4.3
• CVE-2022-27485A improper neutralization of special elements used in an sql…6.5