Lucene search

VulDBCVELIST:CVE-2022-2736

HistoryAug 11, 2022 - 4:55 a.m.

CVE-2022-2736 SourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted upload

2022-08-1104:55:23

CWE-434

VulDB

www.cve.org

sourcecodester

cms

updatelogo.php

unrestricted upload

vulnerability

remote attack

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

9.7 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

A vulnerability was found in SourceCodester Company Website CMS. It has been classified as critical. This affects an unknown part of the file /dashboard/updatelogo.php of the component Background Upload Logo Icon. The manipulation of the argument xfile/ufile leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-205881 was assigned to this vulnerability.

CNA Affected

[
  {
    "product": "Company Website CMS",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

vuldb.com/?id.205881