CVE-2022-39179 College Management System v1.0 - Authenticated remote code execution
An attacker can upload malicious PHP files to execute arbitrary code, potentially leading to full system compromise.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-39179?
CVE-2022-39179 is a high-severity vulnerability in College Management System v1.0, published on 17 Nov 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.
Weakness: CWE-89
Which versions are affected by CVE-2022-39179?
It affects 1 product.
Products include College Management System Project College Management System.
How do I fix CVE-2022-39179?
No fix has been published for CVE-2022-39179 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-39179 being exploited?
There is no known exploitation of CVE-2022-39179 in the wild and no public exploit code.
Other vulnerabilities in College Management System v1.0
Sources
Also known as GHSA-g5fq-p794-xxc8.