Back to Database
Status published
Medium
CVE-2022-2086
SourceCodester Bank Management System login.php sql injection
Vulnerability Description
A vulnerability, which was classified as critical, has been found in SourceCodester Bank Management System 1.0. Affected by this issue is login.php. The manipulation of the argument password with the input 1'and 1=2 union select 1,sleep(10),3,4,5 --+ leads to sql injection. The attack may be launched remotely. The exploit has been disclosed to the public and may be used.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
THREAT MONITOR
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-2086
Credits & Attribution
No credits recorded in the NVD database.
References
More from SourceCodester
View All →CVE-2025-9833
SourceCodester Online Farm Management System login.php sql injection
Medium
6.9
CVE-2025-9832
SourceCodester Food Ordering Management System register-router.php sql injection
Medium
6.9
CVE-2025-9790
SourceCodester Hotel Reservation System updateabout.php sql injection
Medium
6.9
CVE-2025-9789
SourceCodester Online Hotel Reservation System edituser.php sql injection
Medium
6.9
CVE-2025-9788
SourceCodester/Campcodes School Log Management System admin_class.php sql injection
Medium
6.9
Affected Vendor
SourceCodester
View all reports →Affected Software
Bank Management System
Vulnerable Versions:
1.0
Timeline
Official Publish:
June 15th, 2022
Last Modified:
April 15th, 2025
Added to House:
July 21st, 2026
CVSS Vectors
V3:
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L