Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%

CVE-2022-30887

EPSS 5.23% · P90
Get alerts for future matching vulnerabilitiesLog in to subscribe

I. Basic Information for CVE-2022-30887

Vulnerability Information

Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Description
Pharmacy Management System v1.0 was discovered to contain a remote code execution (RCE) vulnerability via the component /php_action/editProductImage.php. This vulnerability allows attackers to execute arbitrary code via a crafted image file.
Source: NVD (National Vulnerability Database)
CVSS Information
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Type
N/A
Source: NVD (National Vulnerability Database)
Vulnerability Title
Pharmacy Management System代码问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Pharmacy Management System(MPMS)是Mayuri K.个人开发者的一个多语言药房管理系统。 Pharmacy Management System v1.0 版本存在安全漏洞,该漏洞源于组件 /php_action/editProductImage.php 包含远程代码执行(RCE)问题。攻击者利用该漏洞可以通过制作的图像文件执行任意代码。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

VendorProductAffected VersionsCPESubscribe
-n/a n/a -

II. Public POCs for CVE-2022-30887

#POC DescriptionSource LinkShenlong Link
1Nonehttps://github.com/MuallimNaci/CVE-2022-30887POC Details
2Nonehttps://github.com/Sonerctnkya/CVE-2022-30887POC Details
AI-Generated POCPremium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2022-30887

登录查看更多情报信息。

Same Patch Batch · n/a · 2022-05-20 · 42 CVEs total

CVE-2022-312588.2 HIGHCheckmk 后置链接漏洞
CVE-2022-244347.5 HIGHDenial of Service (DoS)
CVE-2022-289856.3 MEDIUMOrangeHRM 跨站脚本漏洞
CVE-2022-211955.3 MEDIUMRegular Expression Denial of Service (ReDoS)
CVE-2022-28992Online Banquet Booking System 跨站请求伪造漏洞
CVE-2022-28106Online Sports Complex Booking System 授权问题漏洞
CVE-2022-28993Multi Store Inventory Management System授权问题漏洞
CVE-2022-29320MiniTool Partition Wizard 代码问题漏洞
CVE-2022-30518ChatBot Application with a Suggestion FeatureSQL注入漏洞
CVE-2022-30886School Dormitory Management System SQL注入漏洞
CVE-2022-31245mailcow 操作系统命令注入漏洞
CVE-2022-28660Grafana 访问控制错误漏洞
CVE-2021-43729Pix-Link MiNi Router 跨站脚本漏洞
CVE-2021-43728Pix-Link MiNi Router 28K.MiniRouter.20190211跨站脚本漏洞
CVE-2021-30028SOOTEWAY Wi-Fi Range Extender 授权问题漏洞
CVE-2022-28990wasm3缓冲区错误漏洞
CVE-2022-28531Covid-19 Directory on Vaccination System SQL注入漏洞
CVE-2022-28995Rengine 安全漏洞
CVE-2022-22973多款VMware产品权限许可和访问控制问题漏洞
CVE-2022-22972多款VMware产品授权问题漏洞

Showing top 20 of 42 CVEs. View all on vendor page → →

IV. Related Vulnerabilities

V. Comments for CVE-2022-30887

No comments yet


Leave a comment