← Zuruck zu CVEs
CVE-2022-36667
HIGH8.8
Beschreibung
Garage Management System 1.0 is vulnerable to the Remote Code Execution (RCE) due to the lack of filtering from the file upload function. The vulnerability exist during adding parts and from the upload function, the attacker can upload PHP Reverse Shell straight away to gain RCE.
CVE Details
CVSS v3.1 Bewertung8.8
SchweregradHIGH
CVSS VektorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
AngriffsvektorNETWORK
KomplexitatLOW
Erforderliche PrivilegienLOW
BenutzerinteraktionNONE
Veroffentlicht9/14/2022
Zuletzt geandert11/21/2024
Quellenvd
Honeypot-Sichtungen0
Betroffene Produkte
garage_management_system_project:garage_management_system
Schwachen (CWE)
CWE-434
Referenzen
https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md(cve@mitre.org)
https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html(cve@mitre.org)
https://github.com/saitamang/POC-DUMP/blob/main/Garage%20Management%20System/README.md(af854a3a-2127-422b-91ae-364da2661108)
https://www.sourcecodester.com/php/15485/garage-management-system-using-phpmysql-source-code.html(af854a3a-2127-422b-91ae-364da2661108)
IOC Korrelationen
Keine Korrelationen erfasst
This product uses data from the NVD API but is not endorsed or certified by the NVD.