CVE-2022-3121

🗓️ 05 Sep 2022 13:50:11Reported by VulDBType

cve🔗 web.nvd.nist.gov📰️ 3 Media mentions👁 81 Views🌐 WEB

Vulnerability in SourceCodester Online Employee Leave Management System 1.0 allows remote cross-site request forgery via /admin/addemployee.ph

Reporter	Title	Published	Views	Family All 11
Circl	CVE-2022-3121	5 Sep 202218:12	–	circl
CNNVD	Online Employee Leave Management System Cross-site Request Forgery Vulnerability	5 Sep 202200:00	–	cnnvd
CNVD	Online Employee Leave Management System跨站请求伪造漏洞	6 Sep 202200:00	–	cnvd
Cvelist	CVE-2022-3121 SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgery	5 Sep 202213:50	–	cvelist
EUVD	EUVD-2022-42548	3 Oct 202520:07	–	euvd
NVD	CVE-2022-3121	5 Sep 202214:15	–	nvd
osv_cve	CVE-2022-3121	5 Sep 202214:15	–	osv_cve
Prion	Cross site request forgery (csrf)	5 Sep 202214:15	–	prion
Positive Technologies	PT-2022-20610 · Sourcecodester · Sourcecodester Online Employee Leave Management System	5 Sep 202200:00	–	ptsecurity
Rapid7 Vulnerability Database (full)	CVE-2022-3121: Cross-Site Request Forgery (CSRF)	5 Sep 202200:00	–	rapid7

NVD

Vulners

Node

online_employee_leave_management_system_project online_employee_leave_management_systemMatch1.0

[
  {
    "product": "Online Employee Leave Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

Source	Link
vuldb	www.vuldb.com/

Parameter	Position	Path	Description	CWE
all	request body	/admin/addemployee.php	Cross-Site Request Forgery (CSRF) vulnerability in the /admin/addemployee.php endpoint, allowing an attacker to perform actions on behalf of an authenticated administrator.	CWE-352