CVE-2022-1837: home_clean_services_management_system_project home_clean_services_management_system

Vulnerability summary

CVE-2022-1837 is a high (CVSS 7.2) vulnerability in home_clean_services_management_system_project home_clean_services_management_system. EPSS estimates a 1.34% chance of exploitation in the next 30 days, higher than 70.7% of scored vulnerabilities. 1 public exploit is recorded.

Timeline

1. 24-05-2022
   PublishedVulnerability first disclosed.
2. 15-04-2025
   Last modifiedVulnerability information updated.

Description

A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this issue is register.php?link=registerand. The manipulation with the input <?php phpinfo();?> leads to code execution. The attack may be launched remotely but demands an authentication. Exploit details have been disclosed to the public.

• CWE-434Unrestricted Upload of File with Dangerous TypeThe product allows the upload or transfer of dangerous file types that are automatically processed within its environment.