CVE-2022-27442

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

TPCMS v3.2 allows attackers to access the ThinkPHP log directory and obtain sensitive information such as the administrator's user name and password.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-532

Affected software

No affected versions have been published.

Timeline

Published
Apr 4, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-274447.5MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_subselect.cc.CVE-2022-274457.5MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/sql_window.cc.CVE-2022-274467.5MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.h.CVE-2022-274477.5MariaDB Server v10.9 and below was discovered to contain a use-after-free via the component Binary_string::free_buffer() at /sql/sql_string.CVE-2022-274487.5There is an Assertion failure in MariaDB Server v10.9 and below via 'node->pcur->rel_pos == BTR_PCUR_ON' at /row/row0mysql.cc.CVE-2022-274497.5MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_func.cc:148.CVE-2022-27459.8A vulnerability, which was classified as critical, was found in SourceCodester Gym Management System. This affects an unknown part of the fiCVE-2022-274517.5MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/field_conv.cc.CVE-2022-274527.5MariaDB Server v10.9 and below was discovered to contain a segmentation fault via the component sql/item_cmpfunc.cc.CVE-2022-274557.5MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_wildcmp_8bit_impl at /strings/ctype-simple.CVE-2022-274567.5MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component VDec::VDec at /sql/sql_type.cc.CVE-2022-274577.5MariaDB Server v10.6.3 and below was discovered to contain an use-after-free in the component my_mb_wc_latin1 at /strings/ctype-latin1.c.
CVE-2022-27442: High severity, CVSS 7.5 | Vulnix