CVE-2022-4232

CVE-2022-4232 affects SourceCodester Event Registration System 1.0. The underlying issue is the manipulation of the cmd argument, which leads to unrestricted file upload. Exploitation is described as possible remotely. Multiple connected sources corroborate the core details (critical severity, af...

CVE-2022-4233

SourceCodester Event Registration System 1.0 is affected by CVE-2022-4233 via XSS in the /event/admin/?page=user/list endpoint, triggered by manipulating the First Name/Last Name parameters. The vulnerability enables cross-site scripting and can be exploited remotely. Affected product/issue detai...