CVE-2022-40471

Опубликовано: 31 окт. 2022

Источник: nvd

CVSS3: 9.8

EPSS Высокий

Описание

Remote Code Execution in Clinic's Patient Management System v 1.0 allows Attacker to Upload arbitrary php webshell via profile picture upload functionality in users.php

Ссылки

https://drive.google.com/file/d/1m-wTfOL5gY3huaSEM3YPSf98qIrkl-TW/view?usp=sharing
Exploit
Third Party Advisory
https://github.com/RashidKhanPathan/CVE-2022-40471
Exploit
Third Party Advisory
https://www.sourcecodester.com/php-clinics-patient-management-system-source-code
Product
https://drive.google.com/file/d/1m-wTfOL5gY3huaSEM3YPSf98qIrkl-TW/view?usp=sharing
Exploit
Third Party Advisory
https://github.com/RashidKhanPathan/CVE-2022-40471
Exploit
Third Party Advisory
https://www.sourcecodester.com/php-clinics-patient-management-system-source-code
Product

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:oretnom23:clinic\'s_patient_management_system:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 99%

0.87609

Высокий

9.8 Critical

CVSS3

Дефекты

CWE-434

Связанные уязвимости

GHSA-wfh4-6hvv-x93x