CVE-2022-38351

Description

References

• nobugescapes.com/blog/privilege-escalation-from-user-operator-to-system-administrator · Exploit
• nobugescapes.com/wp-content/uploads/2022/08/Part1.docx · Exploit

Altre vulnerabilità di biostar 2

• CVE-2023-33366ALTO 8.8A SQL injection vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows authenticated users to inject arbitrary SQL directives …
• CVE-2023-33365ALTO 7.5A path traversal vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated attackers to fetch arbitrary files fro…
• CVE-2023-33364ALTO 8.8An OS Command injection vulnerability exists in Suprema BioStar 2 before V2.9.1, which allows authenticated users to execute arbitrary OS co…
• CVE-2023-33363ALTO 7.5An authentication bypass vulnerability exists in Suprema BioStar 2 before 2.9.1, which allows unauthenticated users to access some functiona…
• CVE-2023-31923ALTO 8.8Suprema BioStar 2 before 2022 Q4, v2.9.1 has Insecure Permissions. A vulnerability in the web application allows an authenticated attacker w…