CVE-2022-3436

A vulnerability classified as critical was found in SourceCodester Web-Based Student Clearance System 1.0. Affected by this vulnerability is an unknown functionality of the file edit-photo.php of the component Photo Handler. The manipulation leads to unrestricted upload. The attack can be launched remotely. The associated identifier of this vulnerability is VDB-210367.

CVSS v3.1

7.5 HIGHCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

CVSS v3.1

6.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

EPSS

0.51% chance of exploitation in the next 30 days, 41th percentile

Published

2022-10-09

Updated

2024-08-03

Proof-of-concept exploits (1)

• 1337-L3V1ATH0N/Exploit_Development0★ · 2024-07-29

References

• CVE Record
• NVD entry

Related

• CVE-2022-34328
• CVE-2022-3438
• CVE-2022-34305
• CVE-2022-3440
• CVE-2022-34300
• CVE-2022-3441