CVE-2022-3473

A vulnerability classified as critical has been found in SourceCodester Human Resource Management System. This affects an unknown part of the file getstatecity.php. The manipulation of the argument ci leads to sql injection. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-210717 was assigned to this vulnerability.

• CWE-707
• CWE-89

• https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20ci%20parameter%20is%20injected.pdfExploit, Third Party Advisory
• https://vuldb.com/?id.210717Third Party Advisory
• https://github.com/Hanfu-l/POC-Exp/blob/main/The%20Human%20Resource%20Management%20System%20ci%20parameter%20is%20injected.pdfExploit, Third Party Advisory
• https://vuldb.com/?id.210717Third Party Advisory

Published

Oct 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34724Windows DNS Server Denial of Service Vulnerability7.5
• CVE-2022-34725Windows ALPC Elevation of Privilege Vulnerability7
• CVE-2022-34726Microsoft ODBC Driver Remote Code Execution Vulnerability8.8
• CVE-2022-34727Microsoft ODBC Driver Remote Code Execution Vulnerability8.8
• CVE-2022-34728Windows Graphics Component Information Disclosure Vulnerabil…5.5
• CVE-2022-34729Windows GDI Elevation of Privilege Vulnerability7.8
• CVE-2022-34730Microsoft ODBC Driver Remote Code Execution Vulnerability8.8
• CVE-2022-34731Microsoft WDAC OLE DB provider for SQL Server Remote Code Ex…8.8
• CVE-2022-34732Microsoft ODBC Driver Remote Code Execution Vulnerability8.8
• CVE-2022-34733Microsoft WDAC OLE DB provider for SQL Server Remote Code Ex…8.8
• CVE-2022-34734Microsoft ODBC Driver Remote Code Execution Vulnerability8.8
• CVE-2022-34735The frame scheduling module has a null pointer dereference v…7.5