Vulnerability Description
A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this issue is register.php?link=registerand. The manipulation with the input <?php phpinfo();?> leads to code execution. The attack may be launched remotely but demands an authentication. Exploit details have been disclosed to the public.
CVSS Score
MEDIUM
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Home Clean Services Management System Project | Home Clean Services Management System | 1.0 |
Related Weaknesses (CWE)
References
- https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Home%20Clean%20ServicesExploitThird Party Advisory
- https://vuldb.com/?id.200582Third Party Advisory
- https://github.com/Xor-Gerke/webray.com.cn/blob/main/cve/Home%20Clean%20ServicesExploitThird Party Advisory
- https://vuldb.com/?id.200582Third Party Advisory
FAQ
What is CVE-2022-1837?
CVE-2022-1837 is a vulnerability with a CVSS score of 4.7 (MEDIUM). A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this issue is register.php?link=registerand. The manipulation with the input <?php ph...
How severe is CVE-2022-1837?
CVE-2022-1837 has been rated MEDIUM with a CVSS base score of 4.7/10. Review the CVSS metrics above for detailed severity breakdown.
Is there a patch for CVE-2022-1837?
Check the references section above for vendor advisories and patch information. Affected products include: Home Clean Services Management System Project Home Clean Services Management System.