CVE-2022-2019

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability classified as critical was found in SourceCodester Prison Management System 1.0. Affected by this vulnerability is an unknown functionality of the file /classes/Users.php?f=save of the component New User Creation. The manipulation leads to improper authorization. The attack can be launched remotely. The exploit has been disclosed to the public and may be used.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-285

Affected software

No affected versions have been published.

Timeline

Published
Jun 9, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-201907.5Product: AndroidVersions: Android kernelAndroid ID: A-208744915References: N/ACVE-2022-201919.8Product: AndroidVersions: Android kernelAndroid ID: A-209324757References: N/ACVE-2022-201927.8In grantEmbeddedWindowFocus of WindowManagerService.java, there is a possible way to change an input channel for embedded hierarchy due to aCVE-2022-201937.3In getUniqueUsagesWithLabels of PermissionUsageHelper.java, there is a possible incorrect permission attribution due to a logic error in theCVE-2022-201947.8In onCreate of ChooseLockGeneric.java, there is a possible permission bypass. This could lead to local escalation of privilege with no additCVE-2022-201955.0In the keystore library, there is a possible prevention of access to system Settings due to unsafe deserialization. This could lead to localCVE-2022-201965.0In gallery3d and photos, there is a possible permission bypass due to a confused deputy. This could lead to local information disclosure witCVE-2022-201977.8In recycle of Parcel.java, there is a possible way to start foreground activity from background due to a permissions bypass. This could leadCVE-2022-201984.4In llcp_dlc_proc_connect_pdu of llcp_dlc.cc, there is a possible out of bounds read due to a missing bounds check. This could lead to local CVE-2022-201995.5In multiple locations of NfcService.java, there is a possible disclosure of NFC tags due to a confused deputy. This could lead to local infoCVE-2022-20204.8A vulnerability, which was classified as problematic, has been found in SourceCodester Prison Management System 1.0. Affected by this issue CVE-2022-202005.5In updateApState of SoftApManager.java, there is a possible leak of hotspot state due to a missing permission check. This could lead to loca
CVE-2022-2019: High severity, CVSS 7.5 | Vulnix