CVE-2022-1838mediumCWE-89

CVE-2022-1838: fallo de gravedad media en Home Clean Services Management System

Home Clean Services Management System login.php sql injection

Publicada el · Actualizada el

Seguir esta CVE+ Monitorear Home Clean Services Management System

Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.

13Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 4.7epss 1.0%
A vulnerability classified as critical has been found in Home Clean Services Management System 1.0. This affects an unknown part of admin/login.php. The manipulation of the argument username with the input admin%'/**/AND/**/(SELECT/**/5383/**/FROM/**/(SELECT(SLEEP(5)))JPeh)/**/AND/**/'frfq%'='frfq leads to sql injection. It is possible to initiate the attack remotely but it requires authentication. Exploit details have been disclosed to the public.
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L
Productos afectados
unspecified · Home Clean Services Management System
CVEs relacionadas — Home Clean Services Management System

En el mismo producto, de las más peligrosas a las menos.

CVE-2022-1837MEDIUMHome Clean Services Management System unrestricted uploadEPSS 1.3%CVE-2022-1839MEDIUMHome Clean Services Management System login.php sql injectionEPSS 0.9%CVE-2022-1840LOWHome Clean Services Management System cross site scriptingEPSS 0.6%