CVE-2022-4232 SourceCodester Event Registration System unrestricted upload
Attackers can remotely upload malicious files via the cmd argument in SourceCodester Event Registration System, potentially leading to code execution.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-4232?
CVE-2022-4232 is a medium-severity vulnerability in SourceCodester Event Registration System, published on 30 Nov 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.
Which versions are affected by CVE-2022-4232?
It affects 1 product.
Products include Rinvizle Event Registration System.
How do I fix CVE-2022-4232?
No fix has been published for CVE-2022-4232 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-4232 being exploited?
There is no known exploitation of CVE-2022-4232 in the wild and no public exploit code.
Other vulnerabilities in SourceCodester Event Registration System
Sources
Also known as GHSA-phxq-3m6p-p9q4.