CVE-2022-40742 - CVE House
Back to Database
Status published Medium CVE-2022-40742

SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Local File Inclusion

Vulnerability Description

Mail SQR Expert system has a Local File Inclusion vulnerability. An unauthenticated remote attacker can exploit this vulnerability to execute arbitrary PHP file with .asp file extension under specific system paths, to access and modify partial system information but does not affect service availability.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2022-40742

Credits & Attribution

No credits recorded in the NVD database.

References

More from SOFTNEXT TECHNOLOGIES CORP.

View All →
CVE-2022-40741
SOFTNEXT TECHNOLOGIES CORP. Mail SQR Expert - Command Injection
Critical 9.8

Affected Vendor

SOFTNEXT TECHNOLOGIES CORP.

View all reports →

Affected Software

Mail SQR Expert
Vulnerable Versions:
2dut.190301

Timeline

Official Publish: October 31st, 2022
Last Modified: May 5th, 2025
Added to House: July 21st, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Weaknesses (CWE)

No CWE data available

MITRE ATT&CK TTPs

No associated TTPs found for this vulnerability.