CVE-2022-2779

9.8 criticalEPSS 0.9%

Critical (9.8) in gas agency management system project gas agency management system. EPSS 0.9% chance of exploitation in the next 30 days.

A vulnerability classified as critical was found in SourceCodester Gas Agency Management System. Affected by this vulnerability is an unknown functionality of the file /gasmark/assets/myimages/oneWord.php. The manipulation of the argument shell leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206173 was assigned to this vulnerability.

Severity

CVSS 3.1

9.8 critical

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS: 0.9% chance of exploitation in the next 30 days; higher than 60% of CVEs (scores of 2026-10-31)
CWE: CWE-434
Published: 2022-08-12
Modified: 2026-06-17
Record from: the NVD, synced 2026-10-19

Affected

gas_agency_management_system_project:gas_agency_management_system

References

https://github.com/Drun1baby/CVE_Pentest/blob/main/Gas%20Agency%20Management%20System%20CMS/images/oneWorld.png
https://vuldb.com/?id.206173
https://github.com/Drun1baby/CVE_Pentest/blob/main/Gas%20Agency%20Management%20System%20CMS/images/oneWorld.png
https://vuldb.com/?id.206173

Check your stack JSON