Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2022-17769
HistoryMar 01, 2022 - 12:00 a.m.

Home Owners Collection Management System Remote Code Execution Vulnerability

2022-03-0100:00:00
China National Vulnerability Database
www.cnvd.org.cn
3

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

Home Owners Collection Management System is a homeowner collection management system. A remote code execution vulnerability exists in Home Owners Collection Management System, which originates from a parameter cover via SystemSettings.php. The remote code execution (RCE) vulnerability is caused by a parameter cover in SystemSettings.php. No detailed vulnerability details are available.

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

6.5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:L/Au:S/C:P/I:P/A:P

Related for CNVD-2022-17769