Lucene search

VulDBCVELIST:CVE-2022-2740

HistoryAug 11, 2022 - 4:55 a.m.

CVE-2022-2740 SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload

2022-08-1104:55:34

CWE-434

VulDB

www.cve.org

sourcecodester

cms

add blog

unrestricted upload

vdb-205882

remote attack

critical vulnerability

6.3 Medium

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

LOW

Integrity Impact

LOW

Availability Impact

LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

9.8 High

AI Score

Confidence

High

0.002 Low

EPSS

Percentile

58.7%

JSON

A vulnerability was found in SourceCodester Company Website CMS. It has been declared as critical. This vulnerability affects unknown code of the file /dashboard/add-blog.php of the component Add Blog. The manipulation of the argument ufile leads to unrestricted upload. The attack can be initiated remotely. VDB-205882 is the identifier assigned to this vulnerability.

CNA Affected

[
  {
    "product": "Company Website CMS",
    "vendor": "SourceCodester",
    "versions": [
      {
        "status": "affected",
        "version": "n/a"
      }
    ]
  }
]

References

vuldb.com/?id.205882