PT-2022-24319 · Unknown · Huaxia Erp

Ha0L · Published 2022-11-02 · Updated 2022-11-04 · CVE-2022-3826

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Huaxia ERP (affected versions not specified)

Description A problematic issue has been found in Huaxia ERP, affecting an unknown part of the file /depotHead/list of the Retail Management component. The manipulation of the search argument leads to information disclosure. This issue can be exploited remotely.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Privilege Assignment

Weakness Enumeration

CWE-266

Related Identifiers

CVE-2022-3826

Affected Products

Huaxia Erp

References · 4

• 🔥 https://github.com/Ha0Liu/cveAdd/blob/developer/README.EN.yuequan.md · Exploit
• https://osv.dev/vulnerability/CVE-2022-3826 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2022-3826 · Security Note
• https://vuldb.com/?id.212793 · Note