CVE-2022-42067

MediumCVSS 4.3/10Last modified Jun 17, 2026

Description

Online Birth Certificate Management System version 1.0 suffers from an Insecure Direct Object Reference (IDOR) vulnerability

Metrics

CVSS 3.1 4.3/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

Weakness enumeration

CWE-639

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

https://packetstormsecurity.com/files/168524/Online-Birth-Certificate-Management-System-1.0-Insecure-Direct-Object-Reference.htmlExploit, Third Party Advisory, VDB Entry
https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.htmlProduct
https://packetstormsecurity.com/files/168524/Online-Birth-Certificate-Management-System-1.0-Insecure-Direct-Object-Reference.htmlExploit, Third Party Advisory, VDB Entry
https://www.sourcecodester.com/php/15683/online-birth-certificate-management-system-php-free-download.htmlProduct

Timeline

Published: Oct 14, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-420695.4Online Birth Certificate Management System version 1.0 suffers from a persistent Cross Site Scripting (XSS) vulnerability.CVE-2022-42075.4The Image Hover Effects Ultimate plugin for WordPress is vulnerable to Stored Cross-Site Scripting via several values that can be added to a CVE-2022-420708.8Online Birth Certificate Management System version 1.0 is vulnerable to Cross Site Request Forgery (CSRF).CVE-2022-420716.1Online Birth Certificate Management System version 1.0 suffers from a Cross Site Scripting (XSS) Vulnerability.CVE-2022-420737.2Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editclient.php?id=.CVE-2022-420747.2Online Diagnostic Lab Management System v1.0 is vulnerable to SQL Injection via /diagnostic/editcategory.php?id=.CVE-2022-420759.8Wedding Planner v1.0 is vulnerable to arbitrary code execution.CVE-2022-420776.5Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolReboot.CVE-2022-420786.5Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 is vulnerable to Cross Site Request Forgery (CSRF) via function fromSysToolRestoreSet.CVE-2022-420797.5Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a stack overflow via the function formWifiBasicSet.CVE-2022-42086.1The Chained Quiz plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'datef' parameter on the 'chainedquiz_list' pa CVE-2022-420807.5Tenda AC1206 US_AC1206V1.0RTL_V15.03.06.23_multi_TD01 was discovered to contain a heap overflow via sched_start_time parameter.