Lucene search

K
cveMitreCVE-2022-34120
HistoryJul 27, 2022 - 6:15 p.m.

CVE-2022-34120

2022-07-2718:15:09
CWE-434
mitre
web.nvd.nist.gov
36
6
cve-2022-34120
barangay management system
rce vulnerability
module editing
activity.php
nvd

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.5%

Barangay Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the module editing function at /pages/activity/activity.php.

Affected configurations

Nvd
Node
barangay_management_system_projectbarangay_management_systemMatch1.0
VendorProductVersionCPE
barangay_management_system_projectbarangay_management_system1.0cpe:2.3:a:barangay_management_system_project:barangay_management_system:1.0:*:*:*:*:*:*:*

Social References

More

CVSS3

7.2

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

69.5%