CVE-2022-2744mediumCWE-434

CVE-2022-2744: falha de média gravidade em SourceCodester Gym Management System

SourceCodester Gym Management System Background Management add_exercises.php unrestricted upload

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar Gym Management System

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

13Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 6.3epss 0.6%
A vulnerability, which was classified as critical, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality of the file /admin/add_exercises.php of the component Background Management. The manipulation of the argument exer_img leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206012.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Produtos afetados
SourceCodester · Gym Management System
CVEs relacionadas — SourceCodester Gym Management System

No mesmo produto, das mais perigosas para as menos.

CVE-2022-2842HIGHSourceCodester Gym Management System login.php sql injectionEPSS 0.9%CVE-2022-2749MEDIUMSourceCodester Gym Management System unrestricted uploadEPSS 0.9%CVE-2022-2728MEDIUMSourceCodester Gym Management System index.php sql injectionEPSS 0.8%CVE-2022-2727MEDIUMSourceCodester Gym Management System login.php sql injectionEPSS 0.8%CVE-2022-2703MEDIUMSourceCodester Gym Management System Exercises Module sql injectionEPSS 0.8%CVE-2022-2687MEDIUMSourceCodester Gym Management System sql injectionEPSS 0.8%