CVE-2024-22922

CRITICAL

Projectworlds Vistor Management System <1.0 - Privilege Escalation

Title source: llm

Description

An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php

Exploits (1)

nomisec WRITEUP
by pwnpwnpur1n · poc
https://github.com/pwnpwnpur1n/CVE-2024-22922

References (3)

Scores

CVSS v3 9.8
EPSS 0.0090
EPSS Percentile 75.7%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-269
Status published
Products (1)
projectworlds/visitor_management_system 1.0
Published Jan 25, 2024
Tracked Since Feb 18, 2026