Vulnerability Description
An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learning System v1.0 allows attackers to read arbitrary files.
CVSS Score
7.5
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Simple E-Learning System Project | Simple E-Learning System | 1.0 |
References
- https://github.com/ImaizumiYui/bug_report/blob/main/vendors/oretnom23/Simple%20EExploitThird Party Advisory
- https://github.com/ImaizumiYui/bug_report/blob/main/vendors/oretnom23/Simple%20EExploitThird Party Advisory
FAQ
What is CVE-2022-43319?
CVE-2022-43319 is a vulnerability with a CVSS score of 7.5 (HIGH). An information disclosure vulnerability in the component vcs/downloadFiles.php?download=./search.php of Simple E-Learning System v1.0 allows attackers to read arbitrary files.
How severe is CVE-2022-43319?
CVE-2022-43319 has been rated HIGH with a CVSS base score of 7.5/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-43319?
Check the references section above for vendor advisories and patch information. Affected products include: Simple E-Learning System Project Simple E-Learning System.