Account Takeover Vulnerability in Multi Store Inventory Management System by Packetstorm
CVE-2022-28993

9.8CRITICAL

Key Information:

Vendor

Bdtask

Status
Multi Store Inventory Management System
Vendor
CVE Published:
20 May 2022

What is CVE-2022-28993?

A vulnerability exists in Multi Store Inventory Management System v1.0 that enables attackers to execute an account takeover. The issue arises when a malicious user sends a specially crafted POST request, allowing unauthorized access to user accounts. This security flaw could compromise sensitive data and disrupt operations if left unpatched. It is vital for users to apply the necessary security updates and implement protective measures to mitigate the risk.

References

https://packetstormsecurity.com/files/166591/Multi-Store-...
x_refsource_MISC

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.