{"id":"CVE-2022-2847","state":"PUBLISHED","title":"SourceCodester Guest Management System front.php sql injection","description":"A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue affects some unknown processing of the file /guestmanagement/front.php. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206489 was assigned to this vulnerability.","publishedAt":"2022-08-16T18:51:00.000Z","updatedAt":"2025-04-15T13:49:34.959Z","severity":{"score":6.3,"label":"Medium","version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","source":"VulDB"},"assigner":"VulDB","products":["SourceCodester Guest Management System"],"affected":[{"vendor":"SourceCodester","product":"Guest Management System","versions":[{"version":"n/a","status":"affected"}]}],"references":["https://s1.ax1x.com/2022/08/13/vtDZfe.png","https://vuldb.com/?id.206489"],"weaknesses":["CWE-89"],"ingestedAt":"2026-10-29T19:50:01.354Z","source":{"repository":"CVEProject/cvelistV5","path":"cves/2022/2xxx/CVE-2022-2847.json","commit":"556c9d3a8cd17e218bb8e452ba7cd619a384ff47"},"raw":{"dataType":"CVE_RECORD","dataVersion":"5.1","cveMetadata":{"cveId":"CVE-2022-2847","state":"PUBLISHED","datePublished":"2022-08-16T18:51:00.000Z","dateUpdated":"2025-04-15T13:49:34.959Z","assignerShortName":"VulDB","assignerOrgId":"1af790b2-7ee1-4545-860a-a788eba489b5","dateReserved":"2022-08-16T00:00:00.000Z"},"containers":{"cna":{"title":"SourceCodester Guest Management System front.php sql injection","descriptions":[{"lang":"en","value":"A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue affects some unknown processing of the file /guestmanagement/front.php. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206489 was assigned to this vulnerability."}],"affected":[{"vendor":"SourceCodester","product":"Guest Management System","versions":[{"version":"n/a","status":"affected"}]}],"references":[{"url":"https://s1.ax1x.com/2022/08/13/vtDZfe.png","tags":["x_refsource_MISC"]},{"url":"https://vuldb.com/?id.206489","tags":["x_refsource_MISC"]}],"metrics":[{"cvssV3_1":{"attackComplexity":"LOW","attackVector":"NETWORK","availabilityImpact":"LOW","baseScore":6.3,"baseSeverity":"MEDIUM","confidentialityImpact":"LOW","integrityImpact":"LOW","privilegesRequired":"LOW","scope":"UNCHANGED","userInteraction":"NONE","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}}],"problemTypes":[{"descriptions":[{"cweId":"CWE-89","description":"CWE-89 SQL Injection","lang":"en","type":"CWE"}]}],"providerMetadata":{"shortName":"VulDB","dateUpdated":"2022-08-16T18:51:00.000Z","orgId":"1af790b2-7ee1-4545-860a-a788eba489b5"},"x_generator":"vuldb.com","x_legacyV4Record":{"CVE_data_meta":{"ASSIGNER":"cna@vuldb.com","ID":"CVE-2022-2847","REQUESTER":"cna@vuldb.com","STATE":"PUBLIC","TITLE":"SourceCodester Guest Management System front.php sql injection"},"affects":{"vendor":{"vendor_data":[{"product":{"product_data":[{"product_name":"Guest Management System","version":{"version_data":[{"version_value":"n/a"}]}}]},"vendor_name":"SourceCodester"}]}},"data_format":"MITRE","data_type":"CVE","data_version":"4.0","description":{"description_data":[{"lang":"eng","value":"A vulnerability, which was classified as critical, has been found in SourceCodester Guest Management System. This issue affects some unknown processing of the file /guestmanagement/front.php. The manipulation of the argument rid leads to sql injection. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206489 was assigned to this vulnerability."}]},"generator":"vuldb.com","impact":{"cvss":{"baseScore":"6.3","vectorString":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L","version":"3.1"}},"problemtype":{"problemtype_data":[{"description":[{"lang":"eng","value":"CWE-89 SQL Injection"}]}]},"references":{"reference_data":[{"name":"https://s1.ax1x.com/2022/08/13/vtDZfe.png","refsource":"MISC","url":"https://s1.ax1x.com/2022/08/13/vtDZfe.png"},{"name":"https://vuldb.com/?id.206489","refsource":"MISC","url":"https://vuldb.com/?id.206489"}]}}},"adp":[{"title":"CVE Program Container","references":[{"url":"https://s1.ax1x.com/2022/08/13/vtDZfe.png","tags":["x_refsource_MISC","x_transferred"]},{"url":"https://vuldb.com/?id.206489","tags":["x_refsource_MISC","x_transferred"]}],"providerMetadata":{"shortName":"CVE","orgId":"af854a3a-2127-422b-91ae-364da2661108","dateUpdated":"2024-08-03T00:52:58.967Z"}},{"title":"CISA ADP Vulnrichment","metrics":[{"other":{"type":"ssvc","content":{"timestamp":"2025-04-14T17:00:45.616142Z","id":"CVE-2022-2847","options":[{"Exploitation":"poc"},{"Automatable":"no"},{"Technical Impact":"partial"}],"role":"CISA Coordinator","version":"2.0.3"}}}],"providerMetadata":{"shortName":"CISA-ADP","orgId":"134c704f-9b21-4f2e-91b3-4a467353bcc0","dateUpdated":"2025-04-15T13:49:34.959Z"}}]}}}