CVE-2022-2804 — SourceCodester Zoo Management System apply_vacancy.php unrestricted upload

CVE-2022-2804

SourceCodester Zoo Management System apply_vacancy.php unrestricted upload PUBLISHED

Description (CNA)

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-206250 is the identifier assigned to this vulnerability.

Affected (CNA)

Vendor / product	Versions
SourceCodester / Zoo Management System	affected n/a

CWE

CWE-434

References

https://s1.ax1x.com/2022/08/12/vJ5pEd.png
https://vuldb.com/?id.206250

ADP enrichment

CVE

No English description supplied.

https://s1.ax1x.com/2022/08/12/vJ5pEd.png
https://vuldb.com/?id.206250

CISA-ADP

No English description supplied.

No references supplied.