CVE-2022-2698— SourceCodester Simple E-Learning System search.php sql injection

Quick assessment

Copy summary Copy citation

Affected

SourceCodester Simple E-Learning System

Exploitation

No confirmed in-the-wild exploitation; assess based on exposure

Recommended action

Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Simple E-Learning System是Carlo Montero个人开发者的一个简单的电子学习系统。 Simple E-Learning System存在安全漏洞，该漏洞源于文件search.php的一个未知函数受到影响，对参数searchPost的操作会导致sql注入。攻击可以远程发起，该漏洞利用已向公众披露并可能被使用。

CVE-2022-2698 affects SourceCodester Simple E-Learning System. No confirmed in-the-wild exploitation; assess based on exposure. Simple E-Learning System是Carlo Montero个人开发者的一个简单的电子学习系统。 Simple E-Learning System存在安全漏洞，该漏洞源于文件search.php的一个未知函数受到影响，对参数searchPost的操作会导致sql注入。攻击可以远程发起，该漏洞利用已向公众披露并可能被使用。 CVE-2022-2698 vulnerability details, Shenlong CVE Platform, https://cve.imfht.com/detail/CVE-2022-2698

I. Basic Information for CVE-2022-2698

Affected Products

II. Public POCs for CVE-2022-2698

III. Intelligence Information for CVE-2022-2698

Vendor Advisories for CVE-2022-2698 (1)

• https://vuldb.com/?id.205819 x_refsource_MISC

Other References for CVE-2022-2698 (1)

• https://github.com/E1CHO/water_cve/blob/main/E-learning%20System%20Class%20comment%20query%20SQl%20vulnerability.pdf x_refsource_MISC

• https://www.cve.org/CVERecord?id=CVE-2022-2698

IV. Related Vulnerabilities

V. Comments for CVE-2022-2698