PT-2022-25876 · Unknown · Codeigniter+1

Rashidkhan Pathan · Published 2022-11-23 · Updated 2025-04-28 · CVE-2022-41446

Positive Technologies (AI Summary)

CVSS v3.1

5.4

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions Record Management System using CodeIgniter version 1.0

Description The issue allows attackers to access and modify user data due to an access control problem in the /Admin/dashboard.php endpoint.

Recommendations For Record Management System using CodeIgniter version 1.0, consider restricting access to the /Admin/dashboard.php endpoint until a fix is available.

Exploit

Fix

Related Identifiers

CVE-2022-41446

Affected Products

Codeigniter

Record Management System

References · 7

• 🔥 https://github.com/RashidKhanPathan/CVE-2022-41446 · Exploit
• 🔥 https://drive.google.com/file/d/1Rre498CWp9pWyW9h5ran8GkW6TA2NztC/view?usp=sharing · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-41446 · Security Note
• https://phpgurukul.com/teachers-record-management-system-using-codeigniter · Note
• https://t.me/cvenotify/120090 · Telegram Post
• https://ihexcoder.wixsite.com/secresearch/post/privilege-escalation-in-teachers-record-management-system-using-codeignitor · Note
• https://t.me/cibsecurity/53401 · Telegram Post