CVE-2022-1837 Home Clean Services Management System unrestricted upload
Authenticated attackers can upload malicious PHP files to the registration page, leading to remote code execution on the server.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-1837?
CVE-2022-1837 is a medium-severity vulnerability in unspecified Home Clean Services Management System, published on 24 May 2022. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this issue is register.php?link=registerand. The manipulation with the input <?php phpinfo();?> leads to code execution. The attack may be launched remotely but demands an authentication. Exploit details have been disclosed to the public.
Weakness: CWE-434
Which versions are affected by CVE-2022-1837?
It affects 1 product.
Products include Home Clean Services Management System Project Home Clean Services Management System.
How do I fix CVE-2022-1837?
No fix has been published for CVE-2022-1837 yet. Limit exposure of the affected software until one is available.
Is CVE-2022-1837 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2022-1837 exists.
Other vulnerabilities in unspecified Home Clean Services Management System
Sources
Also known as GHSA-46fw-hr68-x354.