CVE-2022-2804

A vulnerability was found in SourceCodester Zoo Management System. It has been classified as critical. Affected is an unknown function of the file /pages/apply_vacancy.php. The manipulation of the argument filename leads to unrestricted upload. It is possible to launch the attack remotely. The exploit has been disclosed to the public and may be used. VDB-206250 is the identifier assigned to this vulnerability.

• CWE-434

• https://s1.ax1x.com/2022/08/12/vJ5pEd.pngExploit, Third Party Advisory
• https://vuldb.com/?id.206250Third Party Advisory, VDB Entry
• https://s1.ax1x.com/2022/08/12/vJ5pEd.pngExploit, Third Party Advisory
• https://vuldb.com/?id.206250Third Party Advisory, VDB Entry

Published

Aug 12, 2022

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-28030Simple Real Estate Portal System v1.0 was discovered to cont…9.8
• CVE-2022-28032AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admi…9.8
• CVE-2022-28033Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_adm…9.8
• CVE-2022-28034AtomCMS 2.0 is vulnerabie to SQL Injection via Atom.CMS_admi…9.8
• CVE-2022-28035Atom.CMS 2.0 is vulnerable to SQL Injection via Atom.CMS_adm…9.8
• CVE-2022-28036AtomCMS 2.0 is vulnerable to SQL Injection via Atom.CMS_admi…9.8
• CVE-2022-28041stb_image.h v2.27 was discovered to contain an integer overf…6.5
• CVE-2022-28042stb_image.h v2.27 was discovered to contain an heap-based us…8.8
• CVE-2022-28044Irzip v0.640 was discovered to contain a heap memory corrupt…9.8
• CVE-2022-28048STB v2.27 was discovered to contain an integer shift of inva…8.8
• CVE-2022-28049NGINX NJS 0.7.2 was discovered to contain a NULL pointer der…5.5
• CVE-2022-2805A flaw was found in ovirt-engine, which leads to the logging…6.5