CVE-2022-3944

HighCVSS 8.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in jerryhanjj ERP. It has been declared as critical. Affected by this vulnerability is the function uploadImages of the file application/controllers/basedata/inventory.php of the component Commodity Management. The manipulation leads to unrestricted upload. The attack can be launched remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-213451.

Metrics

CVSS 3.1 8.8/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-266CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Nov 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-39455.3Improper Restriction of Excessive Authentication Attempts in GitHub repository kareadita/kavita prior to 0.6.0.3.CVE-2022-39466.5The Welcart e-Commerce WordPress plugin before 2.8.4 does not have authorisation and CSRF in an AJAX action, allowing any logged-in user to CVE-2022-39479.8A vulnerability classified as critical has been found in eolinker goku_lite. This affects an unknown part of the file /balance/service/list.CVE-2022-39489.8A vulnerability classified as critical was found in eolinker goku_lite. This vulnerability affects unknown code of the file /plugin/getList.CVE-2022-39496.1A vulnerability, which was classified as problematic, has been found in Sourcecodester Simple Cashiering System. This issue affects some unkCVE-2022-39506.1A vulnerability, which was classified as problematic, was found in sanluan PublicCMS. Affected is the function initLink of the file dwz.min.CVE-2022-39527.1A vulnerability has been found in ManyDesigns Portofino 5.3.2 and classified as problematic. Affected by this vulnerability is the function CVE-2022-39559.8A vulnerability was found in tholum crm42. It has been rated as critical. This issue affects some unknown processing of the file crm42\classCVE-2022-39569.8A vulnerability classified as critical has been found in tsruban HHIMS 2.1. Affected is an unknown function of the component Patient PortraiCVE-2022-39576.5A vulnerability classified as problematic was found in GPAC. Affected by this vulnerability is the function svg_parse_preserveaspectratio ofCVE-2022-39585.4Cross-site Scripting (XSS) vulnerability in BlueSpiceUserSidebar extension of BlueSpice allows user with regular account and edit permissionCVE-2022-39595.3A vulnerability, which was classified as problematic, has been found in drogon up to 1.8.1. Affected by this issue is some unknown functiona