CVE-2022-1075

MediumCVSS 5.4/10Last modified Jun 17, 2026

Description

A vulnerability was found in College Website Management System 1.0 and classified as problematic. Affected by this issue is the file /cwms/classes/Master.php?f=save_contact of the component Contact Handler. The manipulation leads to persistent cross site scripting. The attack may be launched remotely and requires authentication.

Metrics

CVSS 3.1 5.4/10CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-79

Affected software

Vendor	Product	Versions
unspecified	College Website Management System	1.0

References

https://vuldb.com/?id.194846Permissions Required, Third Party Advisory
https://www.sourcecodester.com/php/15203/college-website-content-management-system-phpoop-free-source-code.htBroken Link, Product
https://vuldb.com/?id.194846Permissions Required, Third Party Advisory
https://www.sourcecodester.com/php/15203/college-website-content-management-system-phpoop-free-source-code.htBroken Link, Product

Timeline

Published: Mar 29, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-10766.1A vulnerability was found in Automatic Question Paper Generator System 1.0. It has been classified as problematic. This affects the file /aq CVE-2022-10777.5A vulnerability was found in TEM FLEX-1080 and FLEX-1085 1.6.0. It has been declared as problematic. This vulnerability log.cgi of the compo CVE-2022-10789.8A vulnerability was found in SourceCodester College Website Management System 1.0. It has been classified as critical. Affected is the file CVE-2022-10796.1A vulnerability classified as problematic has been found in SourceCodester One Church Management System. Affected are multiple files and par CVE-2022-10809.8A vulnerability was found in SourceCodester One Church Management System 1.0. It has been declared as critical. This vulnerability affects c CVE-2022-10816.1A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been declared as problematic. This vulnerability affe CVE-2022-10829.8A vulnerability was found in SourceCodester Microfinance Management System 1.0. It has been rated as critical. This issue affects the file /CVE-2022-10839.8A vulnerability classified as critical has been found in Microfinance Management System. The manipulation of arguments like customer_type_nu CVE-2022-10849.8A vulnerability classified as critical was found in SourceCodester One Church Management System 1.0. Affected by this vulnerability is an un CVE-2022-10856.1A vulnerability was found in CLTPHP up to 6.0. It has been declared as problematic. Affected by this vulnerability is the POST Parameter Han CVE-2022-10865.4A vulnerability was found in DolphinPHP up to 1.5.0 and classified as problematic. Affected by this issue is the User Management Page. The m CVE-2022-10875.4A vulnerability, which was classified as problematic, has been found in htmly 5.3 whis affects the component Edit Profile Module. The manipu