CVE-2024-22922

2024-01-2500:00:00

mitre

www.cve.org

cve-2024-22922

php

post index.php

crafted script

remote attacker

privilege escalation

9.6 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

27.5%

JSON

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php

References

projectworlds.com

visitor.com

github.com/keru6k/CVE-2024-22922/blob/main/CVE-2024-22922.md