Lucene search

VulDBCVE-2022-2909

HistoryAug 20, 2022 - 7:15 a.m.

CVE-2022-2909

2022-08-2007:15:07

CWE-434

VulDB

web.nvd.nist.gov

cve-2022-2909

sourcecodester

simple and nice shopping cart script

vulnerability

remote exploit

file upload

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

41.1%

JSON

A vulnerability was found in SourceCodester Simple and Nice Shopping Cart Script. It has been declared as critical. Affected by this vulnerability is an unknown functionality of the file /mkshop/Men/profile.php. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-206845 was assigned to this vulnerability.

Affected configurations

Nvd

Node

simple_and_nice_shopping_cart_script_projectsimple_and_nice_shopping_cart_scriptMatch-

VendorProductVersionCPE
simple_and_nice_shopping_cart_script_projectsimple_and_nice_shopping_cart_script-cpe:2.3:a:simple_and_nice_shopping_cart_script_project:simple_and_nice_shopping_cart_script:-:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
simple_and_nice_shopping_cart_script_project	simple_and_nice_shopping_cart_script	-	cpe:2.3:a:simple_and_nice_shopping_cart_script_project:simple_and_nice_shopping_cart_script:-:::::::*

CNA Affected

[
  {
    "product": "Simple and Nice Shopping Cart Script",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

s1.ax1x.com/2022/08/14/vUSyHH.png

vuldb.com/?id.206845

Social References

CVSS3

8.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

8.7

Confidence

High

EPSS

0.001

Percentile

41.1%

JSON

Related for CVE-2022-2909