ZeroHour

CVE-2022-4232

CVSS 3.1
9.8 critical
EPSS
<1%p37
Published
()
Modified
Description

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.

Vendors
rinvizle
Products
event registration system
Weakness
CWE-266, CWE-434
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

In the news

No ingested article mentions this CVE yet.