{"id":"CVE-2022-4232","aliases":["EUVD-2022-51590","GHSA-phxq-3m6p-p9q4"],"status":"published","title":"SourceCodester Event Registration System unrestricted upload","description":"A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.","severity":{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-07","score":0.00477,"percentile":0.41439,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-266","CWE-284","CWE-434"],"published":"2022-11-30T00:00:00Z","modified":"2026-06-17T05:20:19Z","products":[{"vendor":"rinvizle","product":"event_registration_system"},{"vendor":"sourcecodester","product":"event registration system"}],"references":[{"url":"https://vuldb.com/?id.214590","tags":["x_transferred","Third Party Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2022-4232"},{"url":"https://github.com/advisories/GHSA-phxq-3m6p-p9q4"}],"sources":{"cve":[{"id":"CVE-2022-4232","title":"SourceCodester Event Registration System unrestricted upload","description":"A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.","status":"published","published":"2022-11-30T00:00:00Z","modified":"2024-08-03T01:34:49.949Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"cna"}],"cwes":["CWE-266"],"updated_at":"2026-11-02T14:34:37.599536Z"}],"euvd":[{"id":"EUVD-2022-51590","description":"A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.","status":"published","published":"2022-11-30T00:00:00Z","modified":"2024-08-03T01:34:49Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"medium"}],"updated_at":"2026-11-03T03:25:56.529973Z"}],"ghsa":[{"id":"GHSA-phxq-3m6p-p9q4","title":"A vulnerability, which was classified as critical, was found in SourceCodester Event Registration...","description":"A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.","status":"published","published":"2022-11-30T12:30:19Z","modified":"2024-02-10T05:07:39Z","cvss":[{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-266","CWE-284","CWE-434"],"updated_at":"2026-11-02T14:55:35.197353Z"}],"nvd":[{"id":"CVE-2022-4232","description":"A vulnerability, which was classified as critical, was found in SourceCodester Event Registration System 1.0. Affected is an unknown function. The manipulation of the argument cmd leads to unrestricted upload. It is possible to launch the attack remotely. VDB-214590 is the identifier assigned to this vulnerability.","status":"published","published":"2022-11-30T12:15:10.49Z","modified":"2026-06-17T05:20:19.543Z","cvss":[{"version":"3.1","score":4.7,"vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L","level":"medium","assessor":"secondary"},{"version":"3.1","score":9.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H","level":"critical","assessor":"primary"}],"cwes":["CWE-266","CWE-434"],"updated_at":"2026-11-02T14:07:32.827264Z"}]}}