CVE-2022-2685 - Vulnerability Details - OpenCVE

A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /addQuestion.php. The manipulation of the argument question with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205673 was assigned to this vulnerability.

No CVSS v4.0

Attack Vector Network

Attack Complexity Low

Privileges Required Low

Scope Unchanged

Confidentiality Impact None

Integrity Impact Low

Availability Impact None

User Interaction Required

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

Key SSVC decision points have not yet been added.

Vendors	Products
Janobe	Interview Management System

Configuration 1 [-]

cpe:2.3:a:janobe:interview_management_system:1.0:*:*:*:*:*:*:*

No data.

References

Link	Providers
https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md
https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md#interview-management-system-xss
https://vuldb.com/?id.205673

History

Tue, 25 Nov 2025 14:00:00 +0000

Type	Values Removed	Values Added
First Time appeared		Janobe Janobe interview Management System
CPEs	cpe:2.3:a:interview_management_system_project:interview_management_system:1.0:::::::*	cpe:2.3:a:janobe:interview_management_system:1.0:::::::*
Vendors & Products	Interview Management System Project Interview Management System Project interview Management System	Janobe Janobe interview Management System

MITRE

Status: PUBLISHED

Assigner: VulDB

Published: 2022-08-05T20:22:39.000Z

Updated: 2025-04-15T13:58:49.009Z

Reserved: 2022-08-05T00:00:00.000Z

Link: CVE-2022-2685

Vulnrichment

No data.

NVD

Status : Modified

Published: 2022-08-05T21:15:08.750

Modified: 2025-11-25T13:56:09.320

Link: CVE-2022-2685

Redhat

No data.

{"containers": {"cna": {"affected": [{"product": "Interview Management System", "vendor": "SourceCodester", "versions": [{"status": "affected", "version": "1.0"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /addQuestion.php. The manipulation of the argument question with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205673 was assigned to this vulnerability."}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}}], "problemTypes": [{"descriptions": [{"cweId": "CWE-79", "description": "CWE-79 Cross Site Scripting", "lang": "en", "type": "CWE"}]}], "providerMetadata": {"dateUpdated": "2022-08-05T20:22:39.000Z", "orgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "shortName": "VulDB"}, "references": [{"tags": ["x_refsource_MISC"], "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md"}, {"tags": ["x_refsource_MISC"], "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md#interview-management-system-xss"}, {"tags": ["x_refsource_MISC"], "url": "https://vuldb.com/?id.205673"}], "title": "SourceCodester Interview Management System addQuestion.php cross site scripting", "x_generator": "vuldb.com", "x_legacyV4Record": {"CVE_data_meta": {"ASSIGNER": "[email protected]", "ID": "CVE-2022-2685", "REQUESTER": "[email protected]", "STATE": "PUBLIC", "TITLE": "SourceCodester Interview Management System addQuestion.php cross site scripting"}, "affects": {"vendor": {"vendor_data": [{"product": {"product_data": [{"product_name": "Interview Management System", "version": {"version_data": [{"version_value": "1.0"}]}}]}, "vendor_name": "SourceCodester"}]}}, "data_format": "MITRE", "data_type": "CVE", "data_version": "4.0", "description": {"description_data": [{"lang": "eng", "value": "A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /addQuestion.php. The manipulation of the argument question with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205673 was assigned to this vulnerability."}]}, "generator": "vuldb.com", "impact": {"cvss": {"baseScore": "3.5", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}}, "problemtype": {"problemtype_data": [{"description": [{"lang": "eng", "value": "CWE-79 Cross Site Scripting"}]}]}, "references": {"reference_data": [{"name": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md", "refsource": "MISC", "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md"}, {"name": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md#interview-management-system-xss", "refsource": "MISC", "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md#interview-management-system-xss"}, {"name": "https://vuldb.com/?id.205673", "refsource": "MISC", "url": "https://vuldb.com/?id.205673"}]}}}, "adp": [{"providerMetadata": {"orgId": "af854a3a-2127-422b-91ae-364da2661108", "shortName": "CVE", "dateUpdated": "2024-08-03T00:46:03.601Z"}, "title": "CVE Program Container", "references": [{"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md#interview-management-system-xss"}, {"tags": ["x_refsource_MISC", "x_transferred"], "url": "https://vuldb.com/?id.205673"}]}, {"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2025-04-14T17:03:19.837177Z", "id": "CVE-2022-2685", "options": [{"Exploitation": "poc"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2025-04-15T13:58:49.009Z"}}]}, "cveMetadata": {"assignerOrgId": "1af790b2-7ee1-4545-860a-a788eba489b5", "assignerShortName": "VulDB", "cveId": "CVE-2022-2685", "datePublished": "2022-08-05T20:22:39.000Z", "dateReserved": "2022-08-05T00:00:00.000Z", "dateUpdated": "2025-04-15T13:58:49.009Z", "state": "PUBLISHED"}, "dataType": "CVE_RECORD", "dataVersion": "5.1"}

{"configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:janobe:interview_management_system:1.0:*:*:*:*:*:*:*", "matchCriteriaId": "765F8425-3BE1-4C95-A372-B03A323B3C5C", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "A vulnerability was found in SourceCodester Interview Management System 1.0 and classified as problematic. This issue affects some unknown processing of the file /addQuestion.php. The manipulation of the argument question with the input <script>alert(1)</script> leads to cross site scripting. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205673 was assigned to this vulnerability."}, {"lang": "es", "value": "Se ha encontrado una vulnerabilidad en SourceCodester Interview Management System versi\u00f3n 1.0 y Ha sido clasificada como problem\u00e1tica. Este problema afecta a un procesamiento desconocido del archivo /addQuestion.php. La manipulaci\u00f3n del argumento question con el input (script)alert(1)(/script) conlleva a un ataque de tipo cross site scripting. El ataque puede ser iniciado remotamente. La explotaci\u00f3n ha sido divulgada al p\u00fablico y puede ser usada. El identificador VDB-205673 fue asignado a esta vulnerabilidad"}], "id": "CVE-2022-2685", "lastModified": "2025-11-25T13:56:09.320", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 3.5, "baseSeverity": "LOW", "confidentialityImpact": "NONE", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.1, "impactScore": 1.4, "source": "[email protected]", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 6.1, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "REQUIRED", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.7, "source": "[email protected]", "type": "Primary"}]}, "published": "2022-08-05T21:15:08.750", "references": [{"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md"}, {"source": "[email protected]", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md#interview-management-system-xss"}, {"source": "[email protected]", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.205673"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Exploit", "Third Party Advisory"], "url": "https://github.com/anx0ing/CVE_demo/blob/main/2022/Interview%20Management%20System-XSS.md#interview-management-system-xss"}, {"source": "af854a3a-2127-422b-91ae-364da2661108", "tags": ["Third Party Advisory", "VDB Entry"], "url": "https://vuldb.com/?id.205673"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Modified", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-79"}], "source": "[email protected]", "type": "Primary"}]}