Lucene search

MitreCVE-2022-48093

HistoryFeb 01, 2023 - 4:15 p.m.

CVE-2022-48093

2023-02-0116:15:09

CWE-94

mitre

web.nvd.nist.gov

seacms

v12.7

rce

remote code execution

vulnerability

admin_ip.php

cve-2022-48093

nvd

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

71.1%

JSON

Seacms v12.7 was discovered to contain a remote code execution (RCE) vulnerability via the ip parameter at admin_ ip.php.

Affected configurations

Nvd

Node

seacmsseacmsMatch12.7

VendorProductVersionCPE
seacmsseacms12.7cpe:2.3:a:seacms:seacms:12.7:*:*:*:*:*:*:*

Vendor	Product	Version	CPE
seacms	seacms	12.7	cpe:2.3:a:seacms:seacms:12.7:::::::*

References

www.yuque.com/litanhua-fost9/hu05qa/ng2cb9ln0i0oqpo7?singleDo

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

71.1%

JSON

Related for CVE-2022-48093