PT-2022-27086 · Sourcecodester · Sourcecodester Canteen Management System

Huangsir · Published 2022-12-11 · Updated 2022-12-13 · CVE-2022-4403

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions SourceCodester Canteen Management System (affected versions not specified)

Description A critical vulnerability was found in the SourceCodester Canteen Management System, affecting the file ajax represent.php. The manipulation of the customer id argument leads to sql injection. The attack can be initiated remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability. As a temporary workaround, consider restricting access to the ajax represent.php file or disabling the manipulation of the customer id argument to minimize the risk of exploitation.

Exploit

Improper Neutralization

SQL injection

Weakness Enumeration

CWE-707

CWE-89

Related Identifiers

CVE-2022-4403

Affected Products

Sourcecodester Canteen Management System

References · 6

• 🔥 https://blog.csdn.net/hzwsuki/article/details/128277038 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-4403 · Security Note
• https://t.me/cvenotify/39588 · Telegram Post
• https://t.me/cibsecurity/54264 · Telegram Post
• https://vuldb.com/?id.215272 · Note
• https://t.me/cvenotify/39581 · Telegram Post