diff --git a/advisories/unreviewed/2022/04/GHSA-vjgw-cc8r-582j/GHSA-vjgw-cc8r-582j.json b/advisories/unreviewed/2022/04/GHSA-vjgw-cc8r-582j/GHSA-vjgw-cc8r-582j.json index 1a02b2452356b..5c3d098348480 100644 --- a/advisories/unreviewed/2022/04/GHSA-vjgw-cc8r-582j/GHSA-vjgw-cc8r-582j.json +++ b/advisories/unreviewed/2022/04/GHSA-vjgw-cc8r-582j/GHSA-vjgw-cc8r-582j.json @@ -1,19 +1,40 @@ { "schema_version": "1.4.0", "id": "GHSA-vjgw-cc8r-582j", - "modified": "2022-04-14T00:00:27Z", + "modified": "2023-01-27T05:01:30Z", "published": "2022-04-08T00:00:22Z", "aliases": [ "CVE-2022-26627" ], - "details": "Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file.", + "summary": "PTMS, Remote Code Execution via Arbitrary HTML File Write", + "details": "Online Project Time Management System v1.0 was discovered to contain an arbitrary file write vulnerability which allows attackers to execute arbitrary code via a crafted HTML file.\n\n> Note: This is a standalone PHP web application downloaded from Sourcecodester, not a published Composer package on Packagist.", "severity": [ { "type": "CVSS_V3", - "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H" + "score": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H" + } + ], + "affected": [ + { + "package": { + "ecosystem": "Packagist", + "name": "sourcecodester/online-project-time-management-system" + }, + "ranges": [ + { + "type": "ECOSYSTEM", + "events": [ + { + "introduced": "0" + }, + { + "last_affected": "1.0" + } + ] + } + ] } ], - "affected": [], "references": [ { "type": "ADVISORY", @@ -22,13 +43,17 @@ { "type": "WEB", "url": "https://github.com/qerogram/BUG_WEB/tree/main/OpenSource/PTMS" + }, + { + "type": "PACKAGE", + "url": "https://www.sourcecodester.com/php/15136/online-project-time-management-system-phpoop-free-source-code.html" } ], "database_specific": { "cwe_ids": [ "CWE-434" ], - "severity": "HIGH", + "severity": "CRITICAL", "github_reviewed": false, "github_reviewed_at": null, "nvd_published_at": "2022-04-07T15:15:00Z"