CVE-2022-2779

🗓️ 12 Aug 2022 09:25:09Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 5 Media mentions👁 48 Views🌐 WEB

Vulnerability in SourceCodester Gas Agency Management Syste

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2022-2779	12 Aug 202214:33	–	circl
CNNVD	Gas Agency Management System 代码问题漏洞	12 Aug 202200:00	–	cnnvd
Cvelist	CVE-2022-2779 SourceCodester Gas Agency Management System oneWord.php unrestricted upload	12 Aug 202209:25	–	cvelist
EUVD	EUVD-2022-35020	3 Oct 202520:07	–	euvd
NVD	CVE-2022-2779	12 Aug 202210:15	–	nvd
Prion	Out-of-bounds	12 Aug 202210:15	–	prion
Positive Technologies	PT-2022-18584 · Sourcecodester · Sourcecodester Garage Management System	12 Aug 202200:00	–	ptsecurity
RedhatCVE	CVE-2022-2779	22 May 202521:55	–	redhatcve

NVD

Node

gas_agency_management_system_project gas_agency_management_systemMatch-

[
  {
    "product": "Gas Agency Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/
github	www.github.com/Drun1baby/CVE_Pentest/blob/main/Gas%20Agency%20Management%20System%20CMS/images/oneWorld.png

Parameter	Position	Path	Description	CWE
shell	request body	/gasmark/assets/myimages/oneWord.php	Unrestricted upload via manipulated shell parameter on oneWord.php enabling arbitrary file upload.	CWE-434