CVE-2022-2212

Name of the Vulnerable Software and Affected Versions SourceCodester Library Management System version 1.0

Description A critical issue was found in the system, affecting an unknown function of the /card/index.php component. The manipulation of the image argument leads to unrestricted upload. This issue can be exploited remotely.

Recommendations For SourceCodester Library Management System version 1.0, restrict access to the /card/index.php endpoint to minimize the risk of exploitation. Avoid using the image argument in this endpoint until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.