CVE-2024-22922

Severity

critical

Source

NVD · cve

Published

2024-01-25

CVSS

9.8

Reference

https://nvd.nist.gov/vuln/detail/CVE-2024-22922

shame 35/100

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php

Players implicated

projectworlds · vendor visitor management system · product

Description

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php

Affected FedRAMP products 0 in the catalog

No correlated FedRAMP products.