CVE-2024-22922

2024-01-2500:00:00

mitre

www.cve.org

cve-2024-22922

php

post index.php

crafted script

remote attacker

privilege escalation

AI Score

9.6

Confidence

High

EPSS

0.001

Percentile

27.3%

JSON

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php

References

projectworlds.com

visitor.com

github.com/keru6k/CVE-2024-22922/blob/main/CVE-2024-22922.md