CVE-2022-3452
published 2022-10-11CVE-2022-3452: A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of…
PriorityP426medium5.4CVSS 3.1
AVNACLPRLUIRSCCLILAN
EPSS
0.39%
31.0th percentile
A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument category_name leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-210436.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| book_store_management_system_project | book_store_management_system | — | — |
| sourcecodester | book_store_management_system | — | — |
CVSS provenance
nvdv3.15.4MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
cisa7.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-w4gj-6c79-5g8h: A vulnerability was found in SourceCodester Book Store Management System 1
ghsa_unreviewed·2022-10-11
CVE-2022-3452 [MEDIUM] CWE-79 GHSA-w4gj-6c79-5g8h: A vulnerability was found in SourceCodester Book Store Management System 1
A vulnerability was found in SourceCodester Book Store Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the file /category.php. The manipulation of the argument category_name leads to cross site scripting. The attack can be initiated remotely. The identifier of this vulnerability is VDB-210436.
CISA
Cisco ASA and FTD Read-Only Path Traversal Vulnerability
cisa·2021-11-03·CVSS 7.5
CVE-2020-3452 [HIGH] CWE-20 Cisco ASA and FTD Read-Only Path Traversal Vulnerability
Vulnerability: Cisco ASA and FTD Read-Only Path Traversal Vulnerability
Affected: Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD)
Cisco Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) contain an improper input validation vulnerability when HTTP requests process URLs. An attacker could exploit this vulnerability by sending a crafted HTTP request containing directory traversal character sequences to an affected device. A successful exploit could allow the attacker to view arbitrary files within the web services file system on the targeted device.
Required Action: Apply updates per vendor instructions.
Notes: https://nvd.nist.gov/vuln/detail/CVE-2020-3452
Remediation Due Date: 2022-05-03
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
2022-10-11
Published