CVE-2022-2767

A vulnerability classified as problematic has been found in SourceCodester Online Admission System. This affects an unknown part of the file /index.php. The manipulation of the argument student_add leads to cross site scripting. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-206163.

• CWE-79

• https://github.com/Drun1baby/CVE_Pentest/blob/main/Online%20Admission%20System%20CMS/images/alert.pngExploit, Third Party Advisory
• https://vuldb.com/?id.206163Third Party Advisory, VDB Entry
• https://github.com/Drun1baby/CVE_Pentest/blob/main/Online%20Admission%20System%20CMS/images/alert.pngExploit, Third Party Advisory
• https://vuldb.com/?id.206163Third Party Advisory, VDB Entry

Published

Aug 11, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27664In net/http in Go before 1.18.6 and 1.19.x before 1.19.1, at…7.5
• CVE-2022-27665Reflected XSS (via AngularJS sandbox escape expressions) exi…6.1
• CVE-2022-27666A heap buffer overflow flaw was found in IPsec ESP transform…7.8
• CVE-2022-27667Under certain conditions, SAP BusinessObjects Business Intel…7.5
• CVE-2022-27668Depending on the configuration of the route permission table…9.8
• CVE-2022-27669An unauthenticated user can use functions of XML Data Archiv…7.5
• CVE-2022-27670SAP SQL Anywhere - version 17.0, allows an authenticated att…6.5
• CVE-2022-27671A CSRF token visible in the URL may possibly lead to informa…6.5
• CVE-2022-27672When SMT is enabled, certain AMD processors may speculativel…4.7
• CVE-2022-27673Insufficient access controls in the AMD Link Android app may…7.5
• CVE-2022-27674Insufficient validation in the IOCTL input/output buffer in …7.5
• CVE-2022-27675Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…