CVE-2022-40742 — SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Local File Inclusion

CVE-2022-40742

SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Local File Inclusion PUBLISHED

Description (CNA)

Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.

Affected (CNA)

Vendor / product	Versions
SOFTNEXT TECHNOLOGIES CORP. / Mail SQR Expert	affected 2dut.190301

CWE

No CWE identifiers supplied.

References

https://www.twcert.org.tw/tw/cp-132-6644-d7aac-1.html

ADP enrichment

CVE

No English description supplied.

https://www.twcert.org.tw/tw/cp-132-6644-d7aac-1.html

CISA-ADP

No English description supplied.

No references supplied.