Lucene search

K
nvd[email protected]NVD:CVE-2022-34024
HistoryJul 19, 2022 - 6:15 p.m.

CVE-2022-34024

2022-07-1918:15:11
CWE-434
web.nvd.nist.gov
3
barangay management system
arbitrary file upload
vulnerability
resident module
editing function

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

42.9%

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php.

Affected configurations

Nvd
Node
barangay_management_system_projectbarangay_management_systemMatch1.0
VendorProductVersionCPE
barangay_management_system_projectbarangay_management_system1.0cpe:2.3:a:barangay_management_system_project:barangay_management_system:1.0:*:*:*:*:*:*:*

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.001

Percentile

42.9%

Related for NVD:CVE-2022-34024