VULNERABILITY INTELLIGENCE

CVE-2022-4232

CVSS score4.7 MEDIUM
EPSS probability0.47%
CISA KEVNot currently listed
Published2022-11-30
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

Description

A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.

Weakness classification

  • CWE-266: Incorrect Privilege Assignment
  • CWE-434: Unrestricted Upload of File with Dangerous Type

Primary references