CVE-2022-2646: SourceCodester Online Admission System index.php cross site scripting
A vulnerability, which was classified as problematic, was found in SourceCodester Online Admission System. Affected is an unknown function of the file index.php. The manipulation of the argument eid with the input 8</h3><script>alert(1)</script> leads to cross site scripting. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. The identifier of this vulnerability is VDB-205572.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2022-2646?
CVE-2022-2646 is classified as a problematic vulnerability.
How does CVE-2022-2646 impact the Online Admission System?
CVE-2022-2646 allows for cross-site scripting due to improper input handling in index.php.
What input manipulation triggers CVE-2022-2646?
The vulnerability is triggered by manipulating the eid parameter with a script injection payload.
Which version of the Online Admission System is affected by CVE-2022-2646?
CVE-2022-2646 affects the Projectworlds Online Admission System without specified version numbers.
How can CVE-2022-2646 be remediated?
Remediation for CVE-2022-2646 involves sanitizing user input to prevent script execution.