Lucene search
K

CVE-2022-45896

🗓️ 25 Dec 2022 00:00:00Reported by mitreType 
cve
 cve
🔗 web.nvd.nist.gov👁 71 Views🌐 WEB

Planet eStream before 6.72.10.07 unauthenticated file upload allows remote code executio

Related
Detection
Refs
Paths
ReporterTitlePublishedViews
Family
0day.today
Planet eStream Code Execution / SQL Injection / XSS / Broken Control Vulnerabilities
10 Dec 202200:00
zdt
Circl
CVE-2022-45896
25 Dec 202207:39
circl
CNNVD
Planet Enterprises Planet eStream 代码问题漏洞
9 Dec 202200:00
cnnvd
Cvelist
CVE-2022-45896
25 Dec 202200:00
cvelist
EUVD
EUVD-2022-48743
3 Oct 202520:07
euvd
NVD
CVE-2022-45896
25 Dec 202205:15
nvd
Packet Storm
Planet eStream Code Execution / SQL Injection / XSS / Broken Control
9 Dec 202200:00
packetstorm
Prion
Remote code execution
25 Dec 202205:15
prion
Positive Technologies
PT-2022-27675 · Unknown · Planet Estream
25 Dec 202200:00
ptsecurity
RedhatCVE
CVE-2022-45896
22 May 202521:46
redhatcve
Rows per page
NVD
Node
ParameterPositionPathDescriptionCWE
fpathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
cpathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
lpathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
tpathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
ppathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
utpathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
tcpathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
bspathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
ctpathUpload2.ashxUpload of arbitrary files leading to remote code execution via file upload endpoints.CWE-434
fnrequest bodyAjax.asmx/ProcessUpload2Completion/processing of uploaded files including webshell payloads; enables remote code execution when used with crafted uploads.CWE-434
Rows per page

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

14 Apr 2025 19:15Current
9.8High risk
Vulners AI Score9.8
CVSS 3.19.8
EPSS0.03001
SSVC
71