Lucene search

VulDBCVELIST:CVE-2022-3121

HistorySep 05, 2022 - 1:50 p.m.

CVE-2022-3121 SourceCodester Online Employee Leave Management System addemployee.php cross-site request forgery

2022-09-0513:50:11

CWE-352

VulDB

www.cve.org

cve-2022-3121

sourcecodester

online employee leave management system

cross-site request forgery

admin

remote attack

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.3%

JSON

A vulnerability was found in SourceCodester Online Employee Leave Management System 1.0. It has been declared as problematic. Affected by this vulnerability is an unknown functionality of the file /admin/addemployee.php. The manipulation leads to cross-site request forgery. The attack can be launched remotely. The identifier VDB-207853 was assigned to this vulnerability.

CNA Affected

[
  {
    "product": "Online Employee Leave Management System",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "1.0"
      }
    ]
  }
]

References

vuldb.com/?id.207853

4.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

LOW

Availability Impact

NONE

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

8.9 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

32.3%

JSON

Related for CVELIST:CVE-2022-3121