Lucene search
@huntrdevCVELIST:CVE-2022-4136HistoryNov 24, 2022 - 12:00 a.m.
CVE-2022-4136 Exposed Dangerous Method or Function in qmpaas/leadshop
2022-11-2400:00:00
CWE-749
@huntrdev
www.cve.org
cve-2022-4136
qmpaas/leadshop
remote code execution
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.2%
Dangerous method exposed which can lead to RCE in qmpass/leadshop v1.4.15 allows an attacker to control the target host by calling any function in leadshop.php via the GET method.
CNA Affected
[
{
"vendor": "qmpaas",
"product": "qmpaas/leadshop",
"versions": [
{
"version": "unspecified",
"lessThan": "1.4.16",
"status": "affected",
"versionType": "custom"
}
]
}
]Related
cve
cve
CVE-2022-4136
2022-11-24 08:15:09
osv
osv
CVE-2022-4136
2022-11-24 08:15:09
huntr
huntr
There is an RCE vulnerability
2022-11-07 09:25:52
nvd
nvd
CVE-2022-4136
2022-11-24 08:15:09
prion
prion
Security feature bypass
2022-11-24 08:15:00
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
LOW
Integrity Impact
HIGH
Availability Impact
LOW
CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:H/A:L
9.6 High
AI Score
Confidence
High
0.002 Low
EPSS
Percentile
57.2%
Related for CVELIST:CVE-2022-4136