PT-2022-4145 · Sourcecodester · Sourcecodester Online Admission System

Drunkbaby · Published 2022-08-11 · Updated 2022-08-15 · CVE-2022-2767

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:N/I:P/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Online Admission System (affected versions not specified)

Description A problematic vulnerability has been found in the SourceCodester Online Admission System, affecting the /index.php file. The manipulation of the student add argument leads to cross-site scripting. This issue can be exploited remotely. The vulnerability may allow an attacker to conduct a cross-site scripting (XSS) attack.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

XSS

Weakness Enumeration

CWE-79

Related Identifiers

BDU:2022-04988

CVE-2022-2767

Affected Products

Sourcecodester Online Admission System

References · 6

• 🔥 https://github.com/Drun1baby/CVE_Pentest/blob/main/Online%20Admission%20System%20CMS/images/alert.png · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-2767 · Security Note
• https://bdu.fstec.ru/vul/2022-04988 · Security Note
• https://t.me/cvenotify/34556 · Telegram Post
• https://t.me/cvenotify/34560 · Telegram Post
• https://vuldb.com/?id.206163 · Note