PT-2022-28040 · Unknown · Sourcecodester Sanitization Management System

Nhsb · Published 2022-12-24 · Updated 2023-01-05 · CVE-2022-4726

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions SourceCodester Sanitization Management System version 1.0

Description A critical vulnerability was found in the Admin Login component, where the manipulation of the username and password arguments leads to SQL injection. The attack can be launched remotely.

Recommendations For SourceCodester Sanitization Management System version 1.0, consider temporarily restricting access to the Admin Login component until a patch is available. As a mitigation measure, avoid using the username and password arguments in the affected login functionality to minimize the risk of exploitation.

Fix

Improper Neutralization

SQL injection

Weakness Enumeration

CWE-707

CWE-89

Related Identifiers

CVE-2022-4726

Affected Products

Sourcecodester Sanitization Management System

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2022-4726 · Security Note
• https://osv.dev/vulnerability/CVE-2022-4726 · Vendor Advisory
• https://t.me/cvenotify/40790 · Telegram Post
• https://vuldb.com/?id.216739 · Note
• https://t.me/cibsecurity/55423 · Telegram Post