Security Advisory

CVE-2022-40742

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-10-31 06:40:42

Last updated 2025-05-05 15:30:22

Assigner twcert

CVSS score 6.5

State PUBLISHED

Description

Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.

← Browse all CVEs View on cve.org ↗