High severity8.0NVD Advisory· Published Sep 14, 2022· Updated Jun 17, 2026

CVE-2022-37140

Description

PayMoney 3.3 is vulnerable to Client Side Remote Code Execution (RCE). The vulnerability exists on the reply ticket function and upload the malicious file. A calculator will open when the victim who download the file open the RTF file.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

PayMoney/PayMoneydescription
Paymoney/Paymoneyllm-fuzzy
Range: 3.3
Techvill/Paymoney
cpe:2.3:a:techvill:paymoney:3.3:*:*:*:*:*:*:*

Patches

Vulnerability mechanics

References

github.com/saitamang/POC-DUMP/tree/main/PayMoneynvdExploitThird Party Advisory
paymoney.techvill.orgnvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.520
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000