CVE-2022-2802
Last modified
CVE-2022-2802 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. A vulnerability has been found in SourceCodester Gas Agency Management System and classified as critical. This vulnerability affects unknown code of the file gasmark/login.php. EPSS estimates a 0.63% chance of exploitation in the next 30 days.
Description
A vulnerability has been found in SourceCodester Gas Agency Management System and classified as critical. This vulnerability affects unknown code of the file gasmark/login.php. The manipulation of the argument username leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-206248.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Gas Agency Management System Project | Gas Agency Management System | All versions |
References
- https://img-blog.csdnimg.cn/e1f59036a87b46529b2403445caf85c2.pngThird Party Advisory
- https://vuldb.com/?id.206248Third Party Advisory, VDB Entry
- https://img-blog.csdnimg.cn/e1f59036a87b46529b2403445caf85c2.pngThird Party Advisory
- https://vuldb.com/?id.206248Third Party Advisory, VDB Entry
Timeline
- Published
- Last Modified
- Status
- Modified
Frequently Asked Questions
What is CVE-2022-2802?
How severe is CVE-2022-2802?
How do I fix CVE-2022-2802?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2022
- CVE-2022-28014Attendance and Payroll System v1.0 was discovered to contain…8.8
- CVE-2022-28015Attendance and Payroll System v1.0 was discovered to contain…8.8
- CVE-2022-28016Attendance and Payroll System v1.0 was discovered to contain…8.8
- CVE-2022-28017Attendance and Payroll System v1.0 was discovered to contain…8.8
- CVE-2022-28018Attendance and Payroll System v1.0 was discovered to contain…8.8
- CVE-2022-28019Attendance and Payroll System v1.0 was discovered to contain…8.8
- CVE-2022-28020Attendance and Payroll System v1.0 was discovered to contain…8.8
- CVE-2022-28021Purchase Order Management System v1.0 was discovered to cont…9.8
- CVE-2022-28022Purchase Order Management System v1.0 was discovered to cont…9.8
- CVE-2022-28023Purchase Order Management System v1.0 was discovered to cont…9.8
- CVE-2022-28024Student Grading System v1.0 was discovered to contain a SQL …9.8
- CVE-2022-28025Student Grading System v1.0 was discovered to contain a SQL …9.8
Are you affected by CVE-2022-2802?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST