CVE-2022-4228

CWE-200 — Information Exposure CWE-306 — Missing Authentication3 documents3 sources

Severity

7.5HIGH

EPSS

0.4%

top 38.65%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

Sourcecodester Book Store Management System Book Store Management System Project Book Store Management System

Timeline

PublishedNov 30

Description

A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of the file /bsms_ci/index.php/user/edit_user/. The manipulation of the argument password leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214587.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:NExploitability: 3.9 | Impact: 1.4

Affected Packages2 packages

▶CVEListV5sourcecodester/book_store_management_system1.0

▶NVDbook_store_management_system_project/book_store_management_system1.0

🔴Vulnerability Details

GHSA

GHSA-83xp-fg77-xfqq: A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1↗2022-11-30

▶

CVEList

SourceCodester Book Store Management System information disclosure↗2022-11-30

▶