Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1336 CNY

100%
Buy Us a Coffee

CVE-2022-47132

Quick assessment

Affected
n/a n/a
Exploitation
Public or AI PoC available; prioritize validation
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Academy Learning Management System是Creativeitem团队的一个学院学习管理系统。 Academy LMS v5.10之前版本存在安全漏洞，攻击者利用该漏洞可以添加管理员用户。

AI Predicted 8.1 Difficulty: Easy EPSS 0.86% · P56

Possible ATT&CK Techniques 1 AI

T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2022-47132

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
A Cross-Site Request Forgery (CSRF) in Academy LMS before v5.10 allows attackers to arbitrarily add Administrator users.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Academy Learning Management System 跨站请求伪造漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Academy Learning Management System是Creativeitem团队的一个学院学习管理系统。 Academy LMS v5.10之前版本存在安全漏洞，攻击者利用该漏洞可以添加管理员用户。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
- n/a n/a -

II. Public POCs for CVE-2022-47132

# POC Description Source Link Shenlong Link
1 Academy LMS <= 5.10 CSRF https://github.com/OpenXP-Research/CVE-2022-47132 POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-47132

请登录查看更多情报信息。

Security Blog Posts for CVE-2022-47132 (1)

Other References for CVE-2022-47132 (2)

Same Patch Batch · n/a · 2023-02-03 · 93 CVEs total

CVE-2023-0663 7.3 HIGH Calendar Event Management System Login Page sql injection
CVE-2022-48021 Zammad 安全漏洞
CVE-2023-24138 TOTOLINK CA300-PoE 命令注入漏洞
CVE-2022-47130 Academy Learning Management System 跨站请求伪造漏洞
CVE-2022-47070 NVS365 安全漏洞
CVE-2022-45588 Talend Remote Engine 代码问题漏洞
CVE-2022-45496 json.h 缓冲区错误漏洞
CVE-2022-45493 json.h 缓冲区错误漏洞
CVE-2022-47131 Academy Learning Management System 跨站脚本漏洞
CVE-2022-48165 WAVLINK WL-WN530H4 安全漏洞
CVE-2023-20854 VMware Workstation 代码注入漏洞
CVE-2023-22975 jfinal cms 跨站脚本漏洞
CVE-2023-23082 Kodi Home Theater Software 缓冲区错误漏洞
CVE-2023-23086 MojoJson 缓冲区错误漏洞
CVE-2023-23087 MojoJson 代码问题漏洞
CVE-2023-23088 json-parser 缓冲区错误漏洞
CVE-2023-23635 Jellyfin 跨站脚本漏洞
CVE-2023-23636 Jellyfin 跨站脚本漏洞
CVE-2023-24029 Progress Software WS_FTP Server 安全漏洞
CVE-2023-24139 TOTOLINK CA300-PoE 命令注入漏洞

Showing top 20 of 93 CVEs. View all on vendor page &rarr; →

IV. Related Vulnerabilities

Same product: n/a
Same vendor: n/a

V. Comments for CVE-2022-47132

No comments yet

Leave a comment