PT-2022-20150 · Unknown · School Dormitory Management System

Abdulaziz Saad + 1 · Published 2022-05-27 · Updated 2022-06-10 · CVE-2022-30513

Positive Technologies (AI Summary)

CVSS v3.1

6.1

Medium

Base vector

AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions School Dormitory Management System version 1.0

Description The issue is related to reflected cross-site scripting (XSS) in the admin/inc/navigation.php file at line 125. This means an attacker could potentially inject malicious scripts into the website, which would then be executed by the user's browser.

Recommendations For School Dormitory Management System version 1.0, consider disabling access to the admin/inc/navigation.php file until a patch is available to prevent exploitation of the reflected XSS issue.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

CVE-2022-30513

Affected Products

School Dormitory Management System

References · 4

• 🔥 https://github.com/bigzooooz/CVE-2022-30513 · Exploit
• https://osv.dev/vulnerability/CVE-2022-30513 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-30513 · Security Note
• https://sourcecodester.com/php/15319/school-dormitory-management-system-phpoop-free-source-code.html · Note