PT-2022-14417 · Sourcecodester · Sourcecodester Prison Management System

Published 2022-06-07 · Updated 2023-06-27 · CVE-2022-2019

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Prison Management System version 1.0

Description A critical issue was found in the New User Creation component, specifically in the /classes/Users.php?f=save file, which leads to improper authorization. This issue can be exploited remotely.

Recommendations For SourceCodester Prison Management System version 1.0, consider restricting access to the New User Creation component until a fix is available. As a temporary workaround, avoid using the /classes/Users.php?f=save file for new user creation to minimize the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this issue.

Exploit

Fix

Improper Authorization

Weakness Enumeration

CWE-285

Related Identifiers

CVE-2022-2019

Affected Products

Sourcecodester Prison Management System

References · 4

• 🔥 https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Prison%20Management%20System--.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-2019 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-2019 · Security Note
• https://vuldb.com/?id.201367 · Note