What’s Vulnerable › Vulnerabilities

CVE-2022-2765: SourceCodester Company Website CMS settings improper authentication

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 1.2% probability of exploitation in the next 30 days
• Public exploit or detection template: yes
• Published: 2022-08-11 · updated 2026-06-17
• Weakness: CWE-287

Description

A vulnerability was found in SourceCodester Company Website CMS 1.0. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /dashboard/settings. The manipulation leads to improper authentication. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206161 was assigned to this vulnerability.

Affected products

• SourceCodester Company Website CMS: 1.0

References

• https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS--.md
• https://vuldb.com/?id.206161
• https://github.com/ch0ing/vul/blob/main/WebRay.com.cn/Company%20Website%20CMS--.md
• https://vuldb.com/?id.206161

Get alerted when CVE-2022-2765 or the next vulnerability affects your stack