← All advisories

Critical severity9.1NVD Advisory· Published Feb 24, 2022· Updated Jun 17, 2026

CVE-2022-25402

CVE-2022-25402

Description

An incorrect access control issue in HMS v1.0 allows unauthenticated attackers to read and modify all PHP files.

Affected products

2

HMS/HMSdescription
Hms/hmsllm-fuzzy
Range: 1.0

Patches

Vulnerability mechanics

References

1

github.com/dota-st/Vulnerability/blob/master/HMS/HMS.mdnvdExploitThird Party Advisory

News mentions

0

No linked articles in our index yet.