CVE-2022-3548

MediumCVSS 4.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been declared as problematic. This vulnerability affects unknown code of the component Add New Storage Handler. The manipulation of the argument Name leads to cross site scripting. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-211048.

Metrics

CVSS 3.1 4.8/10CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Weakness enumeration

CWE-707 CWE-79

Affected software

Vendor	Product	Versions
SourceCodester	Simple Cold Storage Management System	1.0

References

https://github.com/Ramansh123454/POCs/blob/main/POCExploit, Third Party Advisory
https://vuldb.com/?id.211048Third Party Advisory
https://github.com/Ramansh123454/POCs/blob/main/POCExploit, Third Party Advisory
https://vuldb.com/?id.211048Third Party Advisory

Timeline

Published: Oct 17, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-354816.5OTFCC v0.10.4 was discovered to contain a segmentation violation via /multiarch/memmove-vec-unaligned-erms.S.CVE-2022-354826.5OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x65f724.CVE-2022-354836.5OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x5266a8.CVE-2022-354846.5OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6b6a8f.CVE-2022-354856.5OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x703969.CVE-2022-354866.5OTFCC v0.10.4 was discovered to contain a segmentation violation via /release-x64/otfccdump+0x6badae.CVE-2022-354877.5Zammad 5.2.0 suffers from Incorrect Access Control. Zammad did not correctly perform authorization on certain attachment endpoints. This cou CVE-2022-354887.5In Zammad 5.2.0, an attacker could manipulate the rate limiting in the 'forgot password' feature of Zammad, and thereby send many requests f CVE-2022-354896.5In Zammad 5.2.0, customers who have secondary organizations assigned were able to see all organizations of the system rather than only those CVE-2022-35497.2A vulnerability was found in SourceCodester Simple Cold Storage Management System 1.0. It has been rated as problematic. This issue affects CVE-2022-354909.8Zammad 5.2.0 is vulnerable to privilege escalation. Zammad has a prevention against brute-force attacks trying to guess login credentials. A CVE-2022-354919.8TOTOLINK A3002RU V3.0.0-B20220304.1804 has a hardcoded password for root in /etc/shadow.sample.