CVE-2021-44582 - A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL

Back Back to CVE browser

HIGH

A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL

Published Jun 10, 2022

8.8

HIGH

CVSS 3.1

EPSS 1.44%

Description

A Privilege Escalation vulnerability exists in Sourcecodester Money Transfer Management System 1.0, which allows a remote malicious user to gain elevated privileges to the Admin role via any URL.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-425

References (3)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-31406
Advisory
https://github.com/warmachine-57/CVE-2021-44582/blob/main/Privilege%20Escalation%20via%20Forced%20Browsing%20in%20Sourcecodester%20Money%20Transfer%20Management%20System
x_refsource_MISCExploitThird Party Advisory
https://www.sourcecodester.com/php/15015/money-transfer-management-system-send-money-businesses-php-free-source-code.html
x_refsource_MISCProductThird Party Advisory

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2021-31406		Advisory
https://github.com/warmachine-57/CVE-2021-44582/blob/main/Privilege%20Escalation%20via%20Forced%20Browsing%20in%20Sourcecodester%20Money%20Transfer%20Management%20System		x_refsource_MISCExploitThird Party Advisory
https://www.sourcecodester.com/php/15015/money-transfer-management-system-send-money-businesses-php-free-source-code.html		x_refsource_MISCProductThird Party Advisory