CVE-2022-2212

· MEDIUMModified

← All CVEs

CVSS v3.1

6.3

EPSS

0.96%

Published

Jun 27, 2022

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A vulnerability was found in SourceCodester Library Management System 1.0. It has been classified as critical. Affected is an unknown function of the component /card/index.php. The manipulation of the argument image leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used.

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Weaknesses (CWE)

CWE-434CWE-434

Affected Products (1)

library_management_system_project · library_management_systemvulnerable

References (4)

https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/File_Upload/POC.md

ExploitThird Party Advisory

https://vuldb.com/?id.202758

Third Party AdvisoryVDB Entry

https://github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/File_Upload/POC.md

ExploitThird Party Advisory

https://vuldb.com/?id.202758

Third Party AdvisoryVDB Entry

KEV Catalog EPSS Scores Vendors All CVEs