CVE-2022-2212

🗓️ 27 Jun 2022 06:45:24Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 6 Media mentions👁 55 Views🌐 WEB

Critical unrestricted upload vulnerability in SourceCodester Library Management System 1.0 (CVE-2022-2212)

Reporter	Title	Published	Views	Family All 8
CNNVD	Library Management System 代码问题漏洞	27 Jun 202200:00	–	cnnvd
CNVD	Library Management System File Upload Vulnerability	30 Jun 202200:00	–	cnvd
Cvelist	CVE-2022-2212 SourceCodester Library Management System /card/index.php unrestricted upload	27 Jun 202206:45	–	cvelist
EUVD	EUVD-2022-34495	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2212	27 Jun 202207:15	–	nvd
Prion	Design/Logic Flaw	27 Jun 202207:15	–	prion
RedhatCVE	CVE-2022-2212	22 May 202522:24	–	redhatcve
Vulnrichment	CVE-2022-2212 SourceCodester Library Management System /card/index.php unrestricted upload	27 Jun 202206:45	–	vulnrichment

NVD

Vulners

Node

library_management_system_project library_management_systemMatch1.0

[
  {
    "product": "Library Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/CyberThoth/CVE/blob/main/CVE/Library%20Management%20System%20with%20QR%20code%20Attendance/File_Upload/POC.md

Parameter	Position	Path	Description	CWE
image	request body	card/index.php	Unrestricted file upload via image parameter on /card/index.php, enabling remote attacker to upload arbitrary files.	CWE-434