SourceCodester Event Registration System unrestricted upload
CVE-2022-4232

4.7MEDIUM

Key Information:

Vendor
Sourcecodester
Status
Event Registration System
Vendor
CVE Published:
30 November 2022

Summary

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.

Affected Version(s)

Event Registration System 1.0

References

https://vuldb.com/?id.214590

CVSS V3.1

Score:
4.7
Severity:
MEDIUM
Confidentiality:
Low
Integrity:
Low
Availability:
Low
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.