Lucene search
HistoryOct 17, 2022 - 9:15 p.m.
CVE-2022-42142
code execution
online tours
travel management
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
47.3%
Online Tours & Travels Management System v1.0 is vulnerable to Arbitrary code execution via ip/tour/admin/operations/update_settings.php.
Affected configurations
Node
online_tours_and_travels_management_system_projectonline_tours_and_travels_management_systemMatch1.0
| Vendor | Product | Version | CPE |
|---|---|---|---|
| online_tours_and_travels_management_system_project | online_tours_and_travels_management_system | 1.0 | cpe:2.3:a:online_tours_and_travels_management_system_project:online_tours_and_travels_management_system:1.0:*:*:*:*:*:*:* |
Related
prion
prion
Code injection
2022-10-17 21:15:00
cvelist
cvelist
CVE-2022-42142
2022-10-17 00:00:00
cve
cve
CVE-2022-42142
2022-10-17 21:15:10
CVSS3
7.2
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
EPSS
0.001
Percentile
47.3%
Related for NVD:CVE-2022-42142