CVE-2022-4232CWE-266

SourceCodester Event Registration System unrestricted upload

Medium · published November 30, 2022

CVSS v3.1
4.7
EPSS
0%
Percentile
39.5
In the wild
Unconfirmed
What it is

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.

The record
Technical detail
CVSS v3.1
4.7 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
CVSS v4.0
Not supplied
EPSS
0.00468 · 39.5th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2022-11-30T00:00Z
EPSS history
Timeline
  • 30 NOV 00:00Z
    SourceCodester Event Registration System unrestricted upload
    cvelistv5