CVE-2022-1609: critical vulnerability in school-management-pro
The School Management < 9.9.7 - Unauthenticated RCE via REST api
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
97Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 9.8epss 64%
from disclosure to weaponsame day
Published on NVDJan 16
1st PoCMay 27
VulnCheckMay 20
The School Management WordPress plugin before 9.9.7 contains an obfuscated backdoor injected in it's license checking code that registers a REST API handler, allowing an unauthenticated attacker to execute arbitrary PHP code on the site.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
Unknown · school-management-propublic PoCs found — 10
githubgithub.com/0xSojalSec/-CVE-2022-1609★ 3githubgithub.com/itworksig/cve-2022-1609-exploit★ 1githubgithub.com/savior-only/CVE-2022-1609★ 1githubgithub.com/0xSojalSec/CVE-2022-1609★ 0vulncheckvulncheck.com/xdb/ed7f58fe96a5unverifiedcve_referencewpscan.com/vulnerability/e2d546c9-85b6-47a4-b951-781b9ae5d0f2/unverifiedvulncheckvulncheck.com/xdb/c0a434d54825unverifiedvulncheckvulncheck.com/xdb/fddc46a22131unverifiedvulncheckvulncheck.com/xdb/c32c76ba709funverifiedvulncheckvulncheck.com/xdb/8725e385bc65unverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.