CVE-2022-39179

College Management System v1.0 - Authenticated remote code execution

High · published November 17, 2022

CVSS v3.1
7.2
EPSS
1%
Percentile
66.1
In the wild
Unconfirmed
What it is

College Management System v1.0 - Authenticated remote code execution.

An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload

.php file that contains malicious code via student.php file.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.01128 · 66.1th percentile
Published
2022-11-17T22:27Z
EPSS history
Timeline
  • 17 NOV 22:27Z
    College Management System v1.0 - Authenticated remote code execution
    cvelistv5