CVE-2022-4228

 

Published at: - 30-11-2022 01:15

Last modified: - 10-01-2023 11:15

Total changes: - 3

Description

A vulnerability classified as problematic has been found in SourceCodester Book Store Management System 1.0. This affects an unknown part of the file /bsms_ci/index.php/user/edit_user/. The manipulation of the argument password leads to information disclosure. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-214587.

Common Vulnerability Scoring System (CVSS)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

 

Verification logic

 

Reference

• https://github.com/lithonn/bug-report/tree/main/vendors/oretnom23/bsms_ci/passwd-hash
• https://vuldb.com/?id.214587
• https://vuldb.com/?ctiid.214587

 

Keywords

NVD

 

CVE-2022-4228

 

CVE

 

Common vulnerabilities & exposures

 

CVSS

 

Common vulnerability scoring system

 

Security

 

Vulnerabilities

 

Exposures