← Back to browse · API

CVE-2022-40878

Severity

HIGH

CVSS

8.8

EPSS

0.23189

Risk score

43.32

CISA KEV

No

PoC

No

Published

2022-09-27

Modified

2025-05-21

First seen

2026-08-07

Aliases

EUVD-2022-44134, GHSA-4RHP-V69R-6W59

Products

n/a:n/a n/a

Sources

euvd EUVD-2022-44134

Description

In Exam Reviewer Management System 1.0, an authenticated attacker can upload a web-shell php file in profile page to achieve Remote Code Execution (RCE).

References