PT-2022-25195 · Unknown · Simple College Website

Published 2022-09-22 · Updated 2022-09-26 · CVE-2022-40089

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Simple College Website version 1.0

Description A remote file inclusion issue allows attackers to execute arbitrary code via a crafted PHP file. This issue is exploitable when the allow url include directive is set to On.

Recommendations For Simple College Website version 1.0, consider setting the allow url include directive to Off to prevent exploitation. As a temporary workaround, restrict the execution of arbitrary PHP files until a patch is available.

Exploit

Fix

Weakness Enumeration

CWE-98

Related Identifiers

CVE-2022-40089

Affected Products

Simple College Website

References · 6

• 🔥 https://gowthamaraj-rajendran.medium.com/simple-college-website-1-0-rfi-cff8d827572e · Exploit
• https://osv.dev/vulnerability/CVE-2022-40089 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-40089 · Security Note
• https://sourcecodester.com/php/14548/simple-college-website-using-htmlphpmysqli-source-code.html · Note
• https://sourcecodester.com/sites/default/files/download/oretnom23/simple-college-website.zip · Note
• https://t.me/cvenotify/36728 · Telegram Post