Lucene search
China National Vulnerability DatabaseCNVD-2022-54298HistoryMay 13, 2022 - 12:00 a.m.
Wedding Management System Arbitrary File Upload Vulnerability
2022-05-1300:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
arbitrary file upload
validation
upload photos
vulnerability
execution
attackers
specially crafted php files
EPSS
0.001
Percentile
47.3%
The Wedding Management System version 1.0 is vulnerable to arbitrary file uploads due to a lack of validation of uploaded files in the Upload Photos module. The vulnerability can be exploited by attackers to execute arbitrary code via specially crafted PHP files.
Related
prion
prion
Design/Logic Flaw
2022-05-11 13:15:00
cve
cve
CVE-2022-29655
2022-05-11 13:15:08
nvd
nvd
CVE-2022-29655
2022-05-11 13:15:08
cvelist
cvelist
CVE-2022-29655
2022-05-11 12:58:31