Vulnerability · Published Apr 9, 2022 · Assigned by VulDB

CVE-2022-1287School Club Application System resource injection

Medium 6.5

In plain English

A medium-severity security flaw in School Club Application System from unspecified. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 55% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.7%top 45.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A vulnerability classified as critical was found in School Club Application System 1.0. This vulnerability affects a request to the file /scas/classes/Users.php?f=save_user. The manipulation with a POST request leads to privilege escalation. The attack can be initiated remotely and does not require authentication. The exploit has been disclosed to the public and may be used.

Affected products (as reported)

Vendor	Product	Versions
unspecified	School Club Application System	1.0

Weakness: CWE-99 · Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

References

https://vuldb.com/?id.196750 x_refsource_MISC