Facepay 1.0 camera.php userId privilegier eskalering

I Facepay 1.0 var en kritisksvag punkt finns. Som påverkar en okänd funktion filen /face-recognition-php/facepay-master/camera.php. Manipulering av argumenten userId en okänd ingång leder till en sårbarhet klass privilegier eskalering svag punkt. Den rådgivande finns tillgänglig för nedladdning på vuldb.com. Denna svaga punkt är känd som CVE-2022-4281. Attacken på nätet kan. Det finns tekniska detaljer känd. Han deklarerade proof-of-concept. En möjlig åtgärd har utfärdats före och inte efter offentliggörandet.

Fält05/12/2022 07:5926/12/2022 09:1126/12/2022 09:13
nameFacepayFacepayFacepay
version1.01.01.0
file/face-recognition-php/facepay-master/camera.php/face-recognition-php/facepay-master/camera.php/face-recognition-php/facepay-master/camera.php
argumentuserIduserIduserId
cwe639 (privilegier eskalering)639 (privilegier eskalering)639 (privilegier eskalering)
risk222
cvss3_vuldb_avNNN
cvss3_vuldb_acLLL
cvss3_vuldb_prLLL
cvss3_vuldb_uiNNN
cvss3_vuldb_sUUU
cvss3_vuldb_cLLL
cvss3_vuldb_iLLL
cvss3_vuldb_aLLL
cvss3_vuldb_ePPP
cvss3_vuldb_rcRRR
availability111
cveCVE-2022-4281CVE-2022-4281CVE-2022-4281
responsibleVulDBVulDBVulDB
date1670194800 (05/12/2022)1670194800 (05/12/2022)1670194800 (05/12/2022)
cvss2_vuldb_avNNN
cvss2_vuldb_acLLL
cvss2_vuldb_ciPPP
cvss2_vuldb_iiPPP
cvss2_vuldb_aiPPP
cvss2_vuldb_ePOCPOCPOC
cvss2_vuldb_rcURURUR
cvss2_vuldb_auSSS
cvss2_vuldb_rlNDNDND
cvss3_vuldb_rlXXX
cvss2_vuldb_basescore6.56.56.5
cvss2_vuldb_tempscore5.65.65.6
cvss3_vuldb_basescore6.36.36.3
cvss3_vuldb_tempscore5.75.75.7
cvss3_meta_basescore6.36.37.1
cvss3_meta_tempscore5.75.76.9
price_0day$0-$5k$0-$5k$0-$5k
urlhttps://vuldb.com/?id.214789https://vuldb.com/?id.214789
cve_assigned1670194800 (05/12/2022)1670194800 (05/12/2022)
cve_nvd_summaryA vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /face-recognition-php/facepay-master/camera.php. The manipulation of the argument userId leads to authorization bypass. The attack can be launched remotely. The identifier VDB-214789 was assigned to this vulnerability.A vulnerability has been found in Facepay 1.0 and classified as critical. Affected by this vulnerability is an unknown functionality of the file /face-recognition-php/facepay-master/camera.php. The manipulation of the argument userId leads to authorization bypass. The attack can be launched remotely. The identifier VDB-214789 was assigned to this vulnerability.
cvss3_nvd_avN
cvss3_nvd_acL
cvss3_nvd_prL
cvss3_nvd_uiN
cvss3_nvd_sU
cvss3_nvd_cH
cvss3_nvd_iH
cvss3_nvd_aH
cvss3_cna_avN
cvss3_cna_acL
cvss3_cna_prL
cvss3_cna_uiN
cvss3_cna_sU
cvss3_cna_cL
cvss3_cna_iL
cvss3_cna_aL
cve_cnaVulDB
cvss3_nvd_basescore8.8
cvss3_cna_basescore6.3

◂ TidigareÖversiktNästa ▸

Interested in the pricing of exploits?

See the underground prices here!