CVE-2022-44039

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Franklin Fueling System FFS Colibri 1.9.22.8925 is affected by: File system overwrite. The impact is: File system rewrite (remote). ¶¶ An attacker can overwrite system files like [system.conf] and [passwd], this occurs because the insecure usage of "fopen" system function with the mode "wb" which allows overwriting file if exists. Overwriting files such as passwd, allows an attacker to escalate his privileges by planting backdoor user with root privilege or change root password.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-863

Affected software

No affected versions have been published.

Timeline

Published
Dec 5, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-440489.8The d8s-urls for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code exCVE-2022-440499.8The d8s-python for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code CVE-2022-440509.8The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential cCVE-2022-440519.8The d8s-stats for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code eCVE-2022-440529.8The d8s-dates for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code eCVE-2022-440539.8The d8s-networking for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential cCVE-2022-440549.8The d8s-xml for python, as distributed on PyPI, included a potential code-execution backdoor inserted by a third party. A potential code exeCVE-2022-440695.4Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via the Nest library module.CVE-2022-44076.1Cross-site Scripting (XSS) - Reflected in GitHub repository thorsten/phpmyfaq prior to 3.1.9.CVE-2022-440705.4Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via News articles.CVE-2022-440715.4Zenario CMS 9.3.57186 is is vulnerable to Cross Site Scripting (XSS) via profile.CVE-2022-440735.4Zenario CMS 9.3.57186 is vulnerable to Cross Site Scripting (XSS) via svg,Users & Contacts.