CVE-2022-3492

A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerability affects unknown code of the component Profile Photo Handler. The manipulation of the argument parameter leads to os command injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-210772.

• CWE-707
• CWE-78

• https://vuldb.com/?id.210772Third Party Advisory
• https://vuldb.com/?id.210772Third Party Advisory

Published

Oct 13, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-34913md2roff 1.7 has a stack-based buffer overflow via a Markdown…9.8
• CVE-2022-34914Webswing before 22.1.3 allows X-Forwarded-For header injecti…9.8
• CVE-2022-34916Apache Flume versions 1.4.0 through 1.10.0 are vulnerable to…9.8
• CVE-2022-34917A security vulnerability has been identified in Apache Kafka…7.5
• CVE-2022-34918An issue was discovered in the Linux kernel through 5.18.9. …7.8
• CVE-2022-34919The file upload wizard in Zengenti Contensis Classic before …9.8
• CVE-2022-34924Lanling OA Landray Office Automation (OA) internal patch num…7.5
• CVE-2022-34927MilkyTracker v1.03.00 was discovered to contain a stack over…7.8
• CVE-2022-34928JFinal CMS v5.1.0 was discovered to contain a SQL injection …8.8
• CVE-2022-3493A vulnerability, which was classified as problematic, has be…5.4
• CVE-2022-34937Yuba u5cms v8.3.5 was discovered to contain a Cross-Site Req…8.8
• CVE-2022-3494The Complianz WordPress plugin before 6.3.4, and Complianz P…8.8