CVE-2022-2744

CWE-434 — Unrestricted File Upload3 documents3 sources

Severity

9.8CRITICAL

EPSS

0.4%

top 37.98%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester GYM Management System

Timeline

PublishedAug 11

Latest updateAug 12

Description

A vulnerability, which was classified as critical, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality of the file /admin/add_exercises.php of the component Background Management. The manipulation of the argument exer_img leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206012.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:LExploitability: 2.8 | Impact: 3.4

Affected Packages1 packages

▶CVEListV5sourcecodester/gym_management_systemn/a

🔴Vulnerability Details

GHSA

GHSA-p889-hrmr-4p7f: A vulnerability, which was classified as critical, has been found in SourceCodester Gym Management System↗2022-08-12

▶

CVEList

SourceCodester Gym Management System Background Management add_exercises.php unrestricted upload↗2022-08-11

▶