CVE-2022-3436: A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown…

PriorityP342high7.5CVSS 3.1

AVNACLPRNUINSUCNIHAN

EPSS

0.51%

40.0th percentile

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
sourcecodester	web-based_student_clearance_system	—	—
web-based_student_clearance_system_project	web-based_student_clearance_system	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.