CVE-2022-39179

CVE-2022-39179 describes an authenticated remote code execution vulnerability in College Management System v1.0. An administrative user, whose authentication can be bypassed via a separate SQL injection flaw, can upload malicious PHP files through the student.php interface. This vulnerability carries a CVSS score of 7.2 (HIGH), indicating a high potential for impact including complete compromise of confidentiality, integrity, and availability, with a network attack vector and low attack complexity once authenticated. There is currently no evidence of active exploitation, publicly available exploit code in Metasploit, Nuclei, or ExploitDB, and minimal community discussion or media coverage.