CVE-2022-2704CWE-200

SourceCodester Simple E-Learning System downloadFiles.php information disclosure

Medium · published August 8, 2022

CVSS v3.1
4.3
EPSS
1%
Percentile
56.8
In the wild
Unconfirmed
What it is

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205828.

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.00820 · 56.8th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2022-08-08T12:50Z
EPSS history
Timeline
  • 08 AUG 12:50Z
    SourceCodester Simple E-Learning System downloadFiles.php information disclosure
    cvelistv5