EXPOSURES › CVE-2024-22922

CVE-2024-22922

CRITICAL

DETAIL

SourceNVD · cve Published2024-01-25 CVSS9.8 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2024-22922 ↗

SHAME 35/100

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php

▸ RECOMMENDED ACTION Critical severity — schedule patching of the affected products.

PLAYERS IMPLICATED

projectworlds · vendor visitor management system · product

DESCRIPTION

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php

AFFECTED FEDRAMP PRODUCTS · 0

No correlated FedRAMP products.