CVE-2022-34024

HIGH

Barangay Management System v1.0 - File Upload

Title source: llm

Description

Barangay Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the resident module editing function at /bmis/pages/resident/resident.php.

Exploits (1)

nomisec WORKING POC

by sorabug · poc

https://github.com/sorabug/bug_report

View Code ZIP pw:eip

References (1)

Core 1

Core References

Exploit, Third Party Advisory x_refsource_misc

https://github.com/sorabug/bug_report/blob/main/vendors/itsourcecode.com/barangay-management-system/RCE-1.md

View Exploit ZIP pw:eip

Scores

CVSS v3 7.2

EPSS 0.0087

EPSS Percentile 75.3%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE

CWE-434

Status published

Products (1)

barangay_management_system_project/barangay_management_system 1.0

Published Jul 19, 2022

Tracked Since Feb 18, 2026