CVE-2022-37140

PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE)

published September 14, 2022

CVSS
—
EPSS
2%
Percentile
77.7
In the wild
Unconfirmed
What it is

PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the malicious file. A calculator will open when the victim who download the file open the RTF file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01751 · 77.7th percentile
Published
2022-09-14T03:41Z
EPSS history
Timeline
  • 14 SEP 03:41Z
    PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE)
    cvelistv5