ByteOS Network

NVD Vulnerability Details :

CVE-2022-3492

Analyzed

Source-cna@vuldb.com

Published At-13 Oct, 2022 | 16:15

Updated At-25 Jan, 2024 | 21:44

A vulnerability classified as critical was found in SourceCodester Human Resource Management System 1.0. This vulnerability affects unknown code of the component Profile Photo Handler. The manipulation of the argument parameter leads to os command injection. The attack can be initiated remotely. The identifier of this vulnerability is VDB-210772.

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Secondary	3.1	6.3	MEDIUM	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

CPE Matches

oretnom23

>>human_resource_management_system>>1.0

cpe:2.3:a:oretnom23:human_resource_management_system:1.0:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-78	Primary	nvd@nist.gov
CWE-707	Secondary	cna@vuldb.com

References

Hyperlink	Source	Resource
https://vuldb.com/?id.210772	cna@vuldb.com	Third Party Advisory

CISA Catalog

Metrics

CPE Matches

Weaknesses

Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References

Change History