CVE-2022-30423

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Merchandise Online Store v1.0 by oretnom23 has an arbitrary code execution (RCE) vulnerability in the user profile upload point in the system information.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published: Jun 2, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-304258.8Tenda Technology Co.,Ltd HG6 3.3.0-210926 was discovered to contain a command injection vulnerability via the pingAddr and traceAddr paramet CVE-2022-304267.8There is a stack buffer overflow vulnerability, which could lead to arbitrary code execution in UEFI DXE driver on some Acer products. An at CVE-2022-304277.5In ginadmin through 05-10-2022 the incoming path value is not filtered, resulting in directory traversal.CVE-2022-304287.5In ginadmin through 05-10-2022, the incoming path value is not filtered, resulting in arbitrary file reading.CVE-2022-304295.4Multiple cross-site scripting (XSS) vulnerabilities in Neos CMS allow attackers with the editor role or higher to inject arbitrary script or CVE-2022-30438.8Heap buffer overflow in Screen Capture in Google Chrome on Chrome OS prior to 105.0.5195.52 allowed a remote attacker who convinced a user t CVE-2022-30446.5Inappropriate implementation in Site Isolation in Google Chrome prior to 105.0.5195.52 allowed a remote attacker who had compromised the ren CVE-2022-304489.8Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a File upload vulnerability in treatmentrecord.php.CVE-2022-304499.8Hospital Management System in PHP with Source Code (HMS) 1.0 was discovered to contain a SQL injection vulnerability via the editid paramete CVE-2022-30458.8Insufficient validation of untrusted input in V8 in Google Chrome prior to 105.0.5195.52 allowed a remote attacker to potentially exploit he CVE-2022-304509.8A Remote Code Execution (RCE) vulnerability exists in waimairen 9.1 via wx.php CVE-2022-304518.8An authenticated user could execute code via a SQLi vulnerability in waimairenCMS before version 9.1.