CVE-2022-27055

ecjia-daojia 1.38.1-20210202629 is vulnerable to information leakage via content/apps/installer/classes/Helper.php. When the web program is installed, a new environment file is created, and the database information is recorded, including the database record password. NOTE: the vendor disputes this because the environment file is in the data directory, which is not intended for access by website visitors (only the statics directory can be accessed by website visitors)

• CWE-863

• https://github.com/ecjia/ecjia-daojia/blob/dfb322387e8d3d50719e44d23d793072616ff789/content/apps/installer/classes/Controllers/IndexController.php#L74-L78Exploit, Third Party Advisory
• https://github.com/ecjia/ecjia-daojia/blob/dfb322387e8d3d50719e44d23d793072616ff789/content/apps/installer/classes/Helper.php#L312-L318Exploit, Third Party Advisory
• https://github.com/ecjia/ecjia-daojia/issues/20Third Party Advisory
• https://github.com/ecjia/ecjia-daojia/blob/dfb322387e8d3d50719e44d23d793072616ff789/content/apps/installer/classes/Controllers/IndexController.php#L74-L78Exploit, Third Party Advisory
• https://github.com/ecjia/ecjia-daojia/blob/dfb322387e8d3d50719e44d23d793072616ff789/content/apps/installer/classes/Helper.php#L312-L318Exploit, Third Party Advisory
• https://github.com/ecjia/ecjia-daojia/issues/20Third Party Advisory

Published

Apr 19, 2022

Last Modified

Jun 17, 2026

Status

Modified

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2022-27047mogu_blog_cms 5.2 suffers from upload arbitrary files withou…9.8
• CVE-2022-27048A vulnerability has been discovered in Moxa MGate which allo…7.4
• CVE-2022-27049Raidrive before v2021.12.35 allows attackers to arbitrarily …2
• CVE-2022-2705A vulnerability was found in SourceCodester Simple Student I…9.8
• CVE-2022-27050BitComet Service for Windows before version 1.8.6 contains a…7.8
• CVE-2022-27052FreeFtpd version 1.0.13 and below contains an unquoted servi…7.8
• CVE-2022-2706A vulnerability classified as critical has been found in Sou…9.8
• CVE-2022-27061AeroCMS v0.0.1 was discovered to contain an arbitrary file u…7.2
• CVE-2022-27062AeroCMS v0.0.1 was discovered to contain a stored cross-site…4.8
• CVE-2022-27063AeroCMS v0.0.1 was discovered to contain a stored cross-site…6.1
• CVE-2022-27064Musical World v1 was discovered to contain an arbitrary file…8.8
• CVE-2022-2707A vulnerability classified as critical was found in SourceCo…9.8