CVE-2022-38813

CVSS V2 None CVSS V3 None

Description

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report.

Overview

CVE ID
CVE-2022-38813

Assigner
cve@mitre.org

Vulnerability Status
Analyzed

Published Version
2022-11-25T17:15:10

Last Modified Date
2022-11-29T21:22:26

Weakness Enumerations

CWE	URL
CWE-668	http://cwe.mitre.org/data/definitions/668.html

CPE Configuration (Product)

CPE	Vulnerable	Operator	Version Start	Version End
cpe:2.3:a:phpgurukul_blood_donor_management_system_project:phpgurukul_blood_donor_management_system:1.0:::::::*	1	OR

References

Reference URL	Reference Tags
https://drive.google.com/file/d/1iMswKzoUvindXUGh1cuAmi-0R84tLDaH/view?usp=sharing
https://ihexcoder.wixsite.com/secresearch/post/cve-2022-38813-privilege-escalations-in-blood-donor-management-system-v1-0
https://github.com/RashidKhanPathan/CVE-2022-38813
https://phpgurukul.com/blood-donor-management-system-using-codeigniter

Sources

Source Name	Source URL
NIST	https://nvd.nist.gov/vuln/detail/CVE-2022-38813
MITRE	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-38813

History

Created	Old Value	New Value	Data Type	Notes
2022-11-25 18:00:29				Added to TrackCVE
2022-12-07 18:04:08	2022-11-25T17:15Z	2022-11-25T17:15:10	CVE Published Date	updated
2022-12-07 18:04:08		2022-11-29T21:22:26	CVE Modified Date	updated
2022-12-07 18:04:08		Analyzed	Vulnerability Status	updated
2022-12-07 18:04:08		CWE-668	Weakness Enumeration	new
2022-12-07 18:04:09			CPE Information	updated