CVE-2022-2704

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Simple E-Learning System. It has been declared as problematic. This vulnerability affects unknown code of the file downloadFiles.php. The manipulation of the argument download leads to information disclosure. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205828.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-200

Affected software

No affected versions have been published.

Timeline

Published: Aug 8, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-270417.5Due to lack of protection, parameter student_id in OpenSIS Classic 8.0 /modules/eligibility/Student.php can be used to inject SQL queries to CVE-2022-270437.5Yearning versions 2.3.1 and 2.3.2 Interstellar GA and 2.3.4 - 2.3.6 Neptune is vulnerable to Directory Traversal.CVE-2022-270448.8libsixel 1.8.6 is affected by Buffer Overflow in libsixel/src/quant.c:876.CVE-2022-270468.8libsixel 1.8.6 suffers from a Heap Use After Free vulnerability in in libsixel/src/dither.c:388.CVE-2022-270479.8mogu_blog_cms 5.2 suffers from upload arbitrary files without any limitation.CVE-2022-270487.4A vulnerability has been discovered in Moxa MGate which allows an attacker to perform a man-in-the-middle (MITM) attack on the device. This CVE-2022-270492.0Raidrive before v2021.12.35 allows attackers to arbitrarily move log files by pre-creating a mountpoint and log files before Raidrive is ins CVE-2022-27059.8A vulnerability was found in SourceCodester Simple Student Information System. It has been rated as critical. This issue affects some unknow CVE-2022-270507.8BitComet Service for Windows before version 1.8.6 contains an unquoted service path vulnerability which allows attackers to escalate privile CVE-2022-270527.8FreeFtpd version 1.0.13 and below contains an unquoted service path vulnerability which allows local users to launch processes with elevated CVE-2022-270557.5ecjia-daojia 1.38.1-20210202629 is vulnerable to information leakage via content/apps/installer/classes/Helper.php. When the web program is CVE-2022-27069.8A vulnerability classified as critical has been found in SourceCodester Online Class and Exam Scheduling System 1.0. Affected is an unknown