CVE-2022-2749: fallo de gravedad media en SourceCodester Gym Management System
SourceCodester Gym Management System unrestricted upload
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 4.7epss 0.9%
A vulnerability was found in SourceCodester Gym Management System. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mygym/admin/index.php?view_exercises. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206017 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Gym Management SystemCVEs relacionadas — SourceCodester Gym Management System
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-2842HIGHSourceCodester Gym Management System login.php sql injectionEPSS 0.9%CVE-2022-2728MEDIUMSourceCodester Gym Management System index.php sql injectionEPSS 0.8%CVE-2022-2727MEDIUMSourceCodester Gym Management System login.php sql injectionEPSS 0.8%CVE-2022-2703MEDIUMSourceCodester Gym Management System Exercises Module sql injectionEPSS 0.8%CVE-2022-2687MEDIUMSourceCodester Gym Management System sql injectionEPSS 0.8%CVE-2022-2700MEDIUMSourceCodester Gym Management System GET Parameter sql injectionEPSS 0.8%