CVE-2022-28991

HighCVSS 7.5/10Last modified Jun 17, 2026

Description

Multi Store Inventory Management System v1.0 was discovered to contain an information disclosure vulnerability which allows attackers to access sensitive files.

Metrics

CVSS 3.1 7.5/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Weakness enumeration

CWE-425

Affected software

No affected versions have been published.

Timeline

Published
May 20, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-289928.8A Cross-Site Request Forgery (CSRF) in Online Banquet Booking System v1.0 allows attackers to change admin credentials via a crafted POST reCVE-2022-289939.8Multi Store Inventory Management System v1.0 allows attackers to perform an account takeover via a crafted POST request.CVE-2022-289949.8Small HTTP Server version 3.06 suffers from a remote buffer overflow vulnerability via long GET request.CVE-2022-289959.8Rengine v1.0.2 was discovered to contain a remote code execution (RCE) vulnerability via the yaml configuration function.CVE-2022-289977.5CSZCMS v1.3.0 allows attackers to execute a Server-Side Request Forgery (SSRF) which can be leveraged to leak sensitive data via a local filCVE-2022-289988.1Xlight FTP v3.9.3.2 was discovered to contain a stack-based buffer overflow which allows attackers to leak sensitive information via craftedCVE-2022-289998.8Insecure permissions in the install directories and binaries of Dev-CPP v4.9.9.2 allows attackers to execute arbitrary code via overwriting CVE-2022-29009.1Server-Side Request Forgery (SSRF) in GitHub repository ionicabizau/parse-url prior to 8.1.0.CVE-2022-290017.2In SpringBootMovie <=1.2, the uploaded file suffix parameter is not filtered, resulting in arbitrary file upload vulnerabilityCVE-2022-290028.8A Cross-Site Request Forgery (CSRF) in XXL-Job v2.3.0 allows attackers to arbitrarily create administrator accounts via the component /gaia-CVE-2022-290046.1Diary Management System v1.0 was discovered to contain a cross-site scripting (XSS) vulnerability via the Name parameter in search-result.phCVE-2022-290056.1Multiple cross-site scripting (XSS) vulnerabilities in the component /obcs/user/profile.php of Online Birth Certificate System v1.2 allows a
CVE-2022-28991: High severity, CVSS 7.5 | Vulnix