CVE-2022-2019 - SourceCodester Prison Management System New User Creation improper authorization

Back Back to CVE browser

HIGH

SourceCodester Prison Management System New User Creation improper authorization

Published Jun 7, 2022

7.5

HIGH

CVSS 3.1

EPSS 0.77%

Description

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Affected products

Vendor SourceCodester Product Prison Management System Default
n/a
- Version
  1.0
  Status
  affected
  Constraints
  -

Default status is the baseline for the product, each version can override it (e.g. patched versions marked unaffected).

Vendor

Product

Default status

Versions

SourceCodester

Prison Management System

n/a

Version	Status	Constraints
1.0	affected	-

Remediation

No remediation recorded yet.

Weaknesses (1)

CWE-285

References (2)

https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Prison%20Management%20System--.md
x_refsource_MISCExploitThird Party Advisory
https://vuldb.com/?id.201367
x_refsource_MISCThird Party Advisory

Link	Providers	Tags
https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Prison%20Management%20System--.md		x_refsource_MISCExploitThird Party Advisory
https://vuldb.com/?id.201367		x_refsource_MISCThird Party Advisory

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner VulDB

Published Jun 7, 2022

Updated Apr 15, 2025

Reserved Jun 7, 2022

Link CVE-2022-2019

CISA Vulnrichment

Updated Apr 14, 2025

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2022-2019

Red Hat

Severity n/a

Public date n/a

Links CVE-2022-2019