CVE-2022-38813

Published November 25th, 2022

View on NVD ↗

CVSS v3

8.1

HIGH

CVSS v2

N/A

Affected

PROJECT

Description

PHPGurukul Blood Donor Management System 1.0 does not properly restrict access to admin/dashboard.php, which allows attackers to access all data of users, delete the users, add and manage Blood Group, and Submit Report.

RashidKhanPathan/CVE-2022-38813

Authenticated Vertical Privilege Escalation Vulnerability in Blood Donor Management System

GitHub