CVE-2022-29008

An insecure direct object reference (IDOR) vulnerability in the viewid parameter of Bus Pass Management System v1.0 allows attackers to access sensitive information.

Score

CVSS 3.1 6.5 Medium

Status

Modified - cve@mitre.org

Published

2022-05-11

Last modified

2024-08-03

Weaknesses

CWE-639

Affected products

• Bus Pass Management System (Phpgurukul)

References

• https://github.com/sudoninja-noob/CVE-2022-29008/blob/main/CVE-2022-29008.txt
• https://www.exploit-db.com/exploits/50263