Lucene search
MitreCVE-2022-42142HistoryOct 17, 2022 - 9:15 p.m.
CVE-2022-42142
2022-10-1721:15:10
mitre
web.nvd.nist.gov
30
8
cve-2022-42142
online tours & travels
management system
arbitrary code execution
nvd
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
47.3%
Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php.
Affected configurations
Node
online_tours_and_travels_management_system_projectonline_tours_and_travels_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| online_tours_and_travels_management_system_project | online_tours_and_travels_management_system | 1.0 | cpe:2.3:a:online_tours_and_travels_management_system_project:online_tours_and_travels_management_system:1.0:*:*:*:*:*:*:* |
Social References
More
Related
prion
prion
Code injection
2022-10-17 21:15:00
nvd
nvd
CVE-2022-42142
2022-10-17 21:15:10
cvelist
cvelist
CVE-2022-42142
2022-10-17 00:00:00
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
47.3%
Related for CVE-2022-42142