CVE-2022-3436
Assigner: VulDB
Published: 2022-10-09T00:00:00
State: PUBLISHED
title: SourceCodester Web-Based Student Clearance System Photo edit-photo.php unrestricted upload
descriptions: value: A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367.
affected: vendor: SourceCodester
product: Web-Based Student Clearance System
versions: version: 1.0
status: affected
metrics: cvssV3_1: version: 3.1
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: LOW
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: LOW
integrityImpact: LOW
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
problemTypes: descriptions: type: CWE
description: CWE-266 Incorrect Privilege Assignment -> CWE-284 Improper Access Controls -> CWE-434 Unrestricted Upload
cweId: CWE-266
x_generator: vuldb.com