CVE-2022-39179 - CVE House
Back to Database
Status published High CVE-2022-39179

College Management System v1.0 - Authenticated remote code execution

Vulnerability Description

College Management System v1.0 - Authenticated remote code execution. An admin user (the authentication can be bypassed using SQL Injection that mentioned in my other report) can upload .php file that contains malicious code via student.php file.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-39179

Credits & Attribution

The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:

  • Liav Gutman

References

More from College Management

View All →
CVE-2022-39180
College Management System v1.0 - SQL Injection (SQLi)
Critical 9.8

Affected Vendor

College Management

View all reports →

Affected Software

College Management System v1.0
Vulnerable Versions:
All versions

Timeline

Official Publish: November 17th, 2022
Last Modified: April 28th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.