high7.5Public exploit code
CVE-2022-38840
cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upload, which leads to local file disclosur…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- MAN-EAM-0003 V3.2.4 - XXE2023-03-23 · webapps · xml
Impact
cgi-bin/xmlstatus.cgi in Güralp MAN-EAM-0003 3.2.4 is vulnerable to an XML External Entity (XXE) issue via XML file upload, which leads to local file disclosure.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Guralp | Man-Eam-0003 | Version 3.2.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/171439/MAN-EAM-0003-3.2.4-XML-Injection.html
- https://drive.google.com/drive/folders/1UG5IcL8fFp9MV0vjd78_cx6iXKda5bpM?usp=sharing
- http://packetstormsecurity.com/files/171439/MAN-EAM-0003-3.2.4-XML-Injection.html
- https://drive.google.com/drive/folders/1UG5IcL8fFp9MV0vjd78_cx6iXKda5bpM?usp=sharing