CVE-2022-4275

A vulnerability has been found in House Rental System and classified as critical. Affected by this vulnerability is an unknown functionality of the file search-property.php of the component POST Request Handler. The manipulation of the argument search_property leads to sql injection. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214771.

• CWE-707
• CWE-89

• https://github.com/nikeshtiwari1/House-Rental-System/issues/7Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.214771Permissions Required, Third Party Advisory, VDB Entry
• https://github.com/nikeshtiwari1/House-Rental-System/issues/7Exploit, Issue Tracking, Third Party Advisory
• https://vuldb.com/?id.214771Permissions Required, Third Party Advisory, VDB Entry

Published

Dec 3, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-42744CandidATS version 3.0.0 allows an external attacker to perfo…9.8
• CVE-2022-42745CandidATS version 3.0.0 allows an external attacker to read …7.5
• CVE-2022-42746CandidATS version 3.0.0 on 'indexFile' of the 'ajax.php' res…6.1
• CVE-2022-42747CandidATS version 3.0.0 on 'sortBy' of the 'ajax.php' resour…6.1
• CVE-2022-42748CandidATS version 3.0.0 on 'sortDirection' of the 'ajax.php'…6.1
• CVE-2022-42749CandidATS version 3.0.0 on 'page' of the 'ajax.php' resource…6.1
• CVE-2022-42750CandidATS version 3.0.0 allows an external attacker to steal…8.8
• CVE-2022-42751CandidATS version 3.0.0 allows an external attacker to eleva…8.8
• CVE-2022-42753SalonERP version 3.0.2 allows an external attacker to steal …6.1
• CVE-2022-42754In npu driver, there is a memory corruption due to a use aft…5.5
• CVE-2022-42755In wlan driver, there is a possible missing bounds check, Th…5.5
• CVE-2022-42756In sensor driver, there is a possible buffer overflow due to…5.5