PT-2022-26305 · Unknown · Simple Exam Reviewer Management System

Ciph0X01 · Published 2022-10-20 · Updated 2025-05-08 · CVE-2022-42197

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Name of the Vulnerable Software and Affected Versions Simple Exam Reviewer Management System version 1.0

Description The issue concerns improper access control in the User List function, allowing low-privileged users to modify user permissions to higher privileges.

Recommendations For Simple Exam Reviewer Management System version 1.0, consider restricting access to the User List function to prevent low-privileged users from modifying user permissions until a proper fix is applied.

Exploit

Fix

Weakness Enumeration

CWE-425

Related Identifiers

CVE-2022-42197

Affected Products

Simple Exam Reviewer Management System

References · 6

• 🔥 https://github.com/ciph0x01/Simple-Exam-Reviewer-Management-System-CVE/blob/main/CVE-2022-42197.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-42197 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-42197 · Security Note
• https://sourcecodester.com/php/15160/simple-exam-reviewer-management-system-phpoop-free-source-code.html · Note
• https://t.me/cvenotify/121379 · Telegram Post
• https://t.me/cibsecurity/51871 · Telegram Post