CVE-2022-40742

SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Local File Inclusion

Medium · published October 31, 2022

CVSS v3.1
6.5
EPSS
1%
Percentile
51.9
In the wild
Unconfirmed
What it is

Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.

The record
Technical detail
CVSS v3.1
6.5 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N
CVSS v4.0
Not supplied
EPSS
0.00682 · 51.9th percentile
Published
2022-10-31T06:40Z
EPSS history
Timeline
  • 31 OCT 06:40Z
    SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Local File Inclusion
    cvelistv5