CVE-2022-39179 — College Management System v1.0 - Authenticated remote code execution

CVE-2022-39179

College Management System v1.0 - Authenticated remote code execution PUBLISHED

Description (CNA)

College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.

Affected (CNA)

Vendor / product	Versions
College Management / College Management System v1.0	affected All versions before Upgrade to the latest version.

CWE

No CWE identifiers supplied.

References

https://www.gov.il/en/Departments/faq/cve_advisories

ADP enrichment

CVE

No English description supplied.

https://www.gov.il/en/Departments/faq/cve_advisories

CISA-ADP

No English description supplied.

No references supplied.