CVE-2022-38297

Impact

UCMS v1.6.0 contains an authentication bypass vulnerability which is exploited via cookie poisoning.

Affected products

Weakness classification

References

• NVD record
• CVE.org record
• https://github.com/tobysunyaya/UCMS_vulunerablities/blob/main/UCMS%20v1.6%20cookies%20poisoning%20attack%20vulnerability
• https://github.com/tobysunyaya/UCMS_vulunerablities/blob/main/UCMS%20v1.6%20cookies%20poisoning%20attack%20vulnerability