CVE Catalog
CVE-2024-22922
CriticalCVSS 9.8Exploitation Probability (EPSS)
Elevated risk0.78%
52th percentile - higher than 52% of all known CVEs
Summary
A vulnerability in Projectworlds Vistor Management System in PHP version 1.0 allows a remote attacker to escalate privileges via a crafted script sent to the login page in the POST/index.php path.
Risk Assessment
An attacker can gain unauthorized access to administrative functions, potentially leading to full system compromise and data breach.
Recommendation
Immediately update the system to the latest available version or apply a security patch, and implement input validation on the login page.
Original NVD description (English source)
An issue in Projectworlds Vistor Management Systemin PHP v.1.0 allows a remtoe attacker to escalate privileges via a crafted script to the login page in the POST/index.php