{"id":"CVE-2022-2801","state":"PUBLISHED","title":"SourceCodester Automated Beer Parlour Billing System Login sql injection","description":"A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206247.","publishedAt":"2022-08-12T19:45:34.000Z","updatedAt":"2025-04-15T13:50:47.129Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Automated Beer Parlour Billing System"],"affected":[{"vendor":"SourceCodester","product":"Automated Beer Parlour Billing System","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://vuldb.com/?id.206247"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T19:50:01.354Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/2xxx/CVE-2022-2801.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-2801","state":"PUBLISHED","datePublished":"2022-08-12T19:45:34.000Z","dateUpdated":"2025-04-15T13:50:47.129Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2022-08-12T00:00:00.000Z"},"containers":{"cna":{"title":"SourceCodester Automated Beer Parlour Billing System Login sql injection","descriptions":[{"lang":"en","value":"A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206247."}],"affected":[{"vendor":"SourceCodester","product":"Automated Beer Parlour Billing System","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://vuldb.com/?id.206247","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","description":"CWE-89 SQL Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulDB","dateUpdated":"2022-08-12T19:45:34.000Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5"},"x_generator":"vuldb.com","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@vuldb.com","ID":"CVE-2022-2801","REQUESTER":"cna@vuldb.com","STATE":"PUBLIC","TITLE":"SourceCodester Automated Beer Parlour Billing System Login sql injection"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Automated Beer Parlour Billing System","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"SourceCodester"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability, which was classified as critical, was found in SourceCodester Automated Beer Parlour Billing System. This affects an unknown part of the component Login. The manipulation of the argument username leads to sql injection. It is possible to initiate the attack remotely. The associated identifier of this vulnerability is VDB-206247."}]},"generator":"vuldb.com","impact":{"cvss":{"baseScore":"6.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-89 SQL Injection"}]}]},"references":{"reference_data":[{"name":"https://vuldb.com/?id.206247","refsource":"MISC","url":"https://vuldb.com/?id.206247"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://vuldb.com/?id.206247","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T00:46:04.465Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-14T17:10:32.956312Z","id":"CVE-2022-2801","options":[{"Exploitation":"none"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-15T13:50:47.129Z"}}]}}}