CVE-2022-39179

—

CVSS 3.1

7.2 high

EPSS

1%p63

Published

Nov 17, 2022 (Nov 17, 2022)

Modified

Jun 17, 2026

Description

College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.

Vendors: college management system project
Products: college management system
Weakness: CWE-89
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.1%)

In the news0 stories

No ingested article mentions this CVE yet.