CVE-2022-2800: gym_management_system_project gym_management_system
Vulnerability summary
CVE-2022-2800 is a medium (CVSS 6.1) vulnerability in gym_management_system_project gym_management_system. EPSS estimates a 0.61% chance of exploitation in the next 30 days, higher than 48.2% of scored vulnerabilities. 1 public exploit is recorded.
Timeline
- 12-08-2022PublishedVulnerability first disclosed.
- 15-04-2025Last modifiedVulnerability information updated.
Description
A vulnerability, which was classified as problematic, has been found in SourceCodester Gym Management System. Affected by this issue is some unknown functionality. The manipulation leads to clickjacking. The attack may be launched remotely. The exploit has been disclosed to the public and may be used. VDB-206246 is the identifier assigned to this vulnerability.
CVSS metrics
2 scores · 2 sources · 1 version- CVE.orgCNA4.3MediumCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:NDiffers
EPSS trend
Probability
0.61%
Chance of exploitation in the next 30 days
Percentile
48%
Versus all other CVEs
30-day change
+0.01 pp
From 0.60% on 19-09-2026
Known exploited
Compare KEV catalogsNot in any of the 3 tracked catalogs.
Public exploits
1 foundRecord4
Maturity: poc
Weaknesses
CWE · root cause- CWE-451User Interface (UI) Misrepresentation of Critical InformationThe user interface (UI) does not properly represent critical information to the user, allowing the information - or its source - to be obscured or spoofed. This is often a component in phishing attacks.
- CWE-1021Improper Restriction of Rendered UI Layers or FramesThe web application does not restrict or incorrectly restricts frame objects or UI layers that belong to another application or domain.
Affected systems
Gym_management_system_project1 product
Sourcecodester1 product
2 vendors · 2 products