Lucene search
MitreCVE-2022-45009HistoryDec 07, 2022 - 2:15 a.m.
CVE-2022-45009
2022-12-0702:15:09
CWE-434
mitre
web.nvd.nist.gov
26
cve-2022-45009
online leave management system
arbitrary file upload
vulnerability
nvd
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
47.5%
Online Leave Management System v1.0 was discovered to contain an arbitrary file upload vulnerability at /leave_system/classes/SystemSettings.php?f=update_settings. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.
Affected configurations
Node
online_leave_management_system_projectonline_leave_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| online_leave_management_system_project | online_leave_management_system | 1.0 | cpe:2.3:a:online_leave_management_system_project:online_leave_management_system:1.0:*:*:*:*:*:*:* |
Related
nvd
nvd
CVE-2022-45009
2022-12-07 02:15:09
cvelist
cvelist
CVE-2022-45009
2022-12-07 00:00:00
prion
prion
Design/Logic Flaw
2022-12-07 02:15:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
47.5%
Related for CVE-2022-45009