CVE-2022-1837 MEDIUM

CVE-2022-1837: Home Clean Services Management System unrestricted upload

Vendor Unspecified
Product Home Clean Services Management System
Weakness CWE-434 · Unrestricted file upload
Published May 24, 2022
Last update April 15, 2025
View on NVD All CVEs

CVSS base score

4.7/10
Attack vector Network
Attack complexity Low
Privileges required High
User interaction None
Confidentiality Low
Integrity Low

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

What the vulnerability does

01Description

A vulnerability was found in Home Clean Services Management System 1.0. It has been rated as critical. Affected by this issue is register.php?link=registerand. The manipulation with the input <?php phpinfo();?> leads to code execution. The attack may be launched remotely but demands an authentication. Exploit details have been disclosed to the public.

Key dates

02Disclosure timeline

May 24, 2022 CVE published
April 15, 2025 Record updated

Related vulnerabilities

04Related CVE

CVE-2026-11333 tittuvarghese CollegeManagementSystem Student Data Upload Endpoint upload_student_data.php unrestricted upload CVE-2026-53724 Parse Server: Stored XSS via trailing-dot filename bypassing file upload extension blocklist CVE-2026-9009 Crawlomatic Multipage Scraper Post Generator <= 2.7.2 - Authenticated (Author+) Remote Code Execution via 'callback_raw' Shortcode Attribute CVE-2026-11839 Arbitrary File Upload in Basarsoft's Rotaban CVE-2026-6211 Arbitrary File Upload in Global IT's WEOLL