Lucene search
HistoryJul 27, 2022 - 6:15 p.m.
CVE-2022-34120
remote code execution
barangay management system
activity.php
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
69.5%
Barangay Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the module editing function at /pages/activity/activity.php.
Affected configurations
Node
barangay_management_system_projectbarangay_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| barangay_management_system_project | barangay_management_system | 1.0 | cpe:2.3:a:barangay_management_system_project:barangay_management_system:1.0:*:*:*:*:*:*:* |
Related
checkpoint_advisories
checkpoint_advisories
Barangay Management System Arbitrary File Upload (CVE-2022-34120)
2022-11-24 00:00:00
cvelist
cvelist
CVE-2022-34120
2022-07-27 17:12:16
prion
prion
Remote code execution
2022-07-27 18:15:00
cve
cve
CVE-2022-34120
2022-07-27 18:15:09
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.003
Percentile
69.5%
Related for NVD:CVE-2022-34120