Headline
CVE-2022-46622: CVE-2022-46622/CVE-2022-46622 at main · sudoninja-noob/CVE-2022-46622
A cross-site scripting (XSS) vulnerability in Judging Management System v1.0 allows attackers to execute arbitrary web scripts or HTML via a crafted payload injected into the firstname parameter.
> [Suggested description]
> A cross-site scripting (XSS) vulnerability in Judging Management System
> v1.0 allows attackers to execute arbitrary web scripts or HTML via a
> crafted payload injected into the firstname parameter.
>
> ------------------------------------------
>
> [Vulnerability Type]
> Cross Site Scripting (XSS)
>
> ------------------------------------------
>
> [Vendor of Product]
> https://www.sourcecodester.com
>
> ------------------------------------------
>
> [Affected Product Code Base]
> Judging Management System - V 1.0
>
> ------------------------------------------
>
> [Affected Component]
> fname=
>
> ------------------------------------------
>
> [Attack Type]
> Local
>
> ------------------------------------------
>
> [Impact Code execution]
> true
>
> ------------------------------------------
>
> [Impact Escalation of Privileges]
> true
>
> ------------------------------------------
>
> [Reference]
> https://www.sourcecodester.com/php/15910/judging-management-system-using-php-and-mysql-free-source-code.html
>
> ------------------------------------------
>
> [Discoverer]
> Sanjay Singh
Use CVE-2022-46622.