Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact
8
CVSSv3

CVE-2022-40472

Published: 29/09/2022 Updated: 03/10/2022
CVSS v3 Base Score: 8 | Impact Score: 5.9 | Exploitability Score: 2.1
VMScore: 0
Subscribe to Zkbio Time

Vulnerability Summary

ZKTeco Xiamen Information Technology ZKBio Time 8.0.7 Build: 20220721.14829 exists to contain a CSV injection vulnerability. This vulnerability allows malicious users to execute arbitrary code via a crafted payload injected into the Content text field of the Add New Message module.

Vulnerability Trend

Vulnerable Product Search on Vulmon Subscribe to Product

zktec zkbio time 8.0.7

References

CWE-1236https://the-it-wonders.blogspot.com/2022/09/zkbio-time-csv-injection.htmlhttps://nvd.nist.gov
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2024-4946CVE-2024-30309CVE-2024-4761CVE-2024-30051type confusionmemory leakCVE-2024-30293reflected XSSCVE-2024-3126
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook