PT-2022-24969 · Unknown · Jerryhanjj Erp

Ace · Published 2022-11-11 · Updated 2022-11-15 · CVE-2022-3944

Positive Technologies (AI Summary)

CVSS v3.1

6.3

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Name of the Vulnerable Software and Affected Versions jerryhanjj ERP (affected versions not specified)

Description A critical vulnerability was found in jerryhanjj ERP, affecting the uploadImages function of the file application/controllers/basedata/inventory.php in the Commodity Management component. This vulnerability leads to unrestricted upload and can be exploited remotely. The exploit has been disclosed to the public.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Incorrect Privilege Assignment

Unrestricted File Upload

Weakness Enumeration

CWE-266

CWE-434

Related Identifiers

CVE-2022-3944

Affected Products

Jerryhanjj Erp

References · 5

• 🔥 https://github.com/jerryhanjj/ERP/issues/3 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2022-3944 · Security Note
• https://t.me/cibsecurity/52914 · Telegram Post
• https://vuldb.com/?id.213451 · Note
• https://t.me/cvenotify/37521 · Telegram Post