MEDIUM🇬🇧 English

CVE-2022-1287

CVSS 6.5v3.1pub. 2022-04-09upd. 2024-11-21

A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=save_user. The manipulation with a POST request leads to privilege escalation. The attack can be initiated remotely and does not require authentication. The exploit has been disclosed to the public and may be used.

oryginał EN
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

  • School Club Application System Project School Club Application System

    APP
    School Club Application System Project
    1.0
🔵
ZWERYFIKUJ U PRODUCENTA
Brak jednoznacznych danych o patchu. Sprawdź referencje od producenta.
Tagi
LPE
CWE
Referencje

Powiązane podatności

CVE-2022-29359MEDIUM6.1ten sam produkt

A stored cross-site scripting (XSS) vulnerability in /scas/?page=clubs/application_form&id=7 of School Club Ap...

CVE-2022-1288MEDIUM4.3ten sam produkt

A vulnerability, which was classified as problematic, has been found in School Club Application System 1.0. Th...