CVE-2022-28062

2022-04-0413:18:00

mitre

www.cve.org

9.1 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

42.6%

JSON

Car Rental System v1.0 contains an arbitrary file upload vulnerability via the Add Car component which allows attackers to upload a webshell and execute arbitrary code.

References

github.com/D4rkP0w4r/CVEs/blob/main/Car%20Rental%20System%20Upload%20%2B%20RCE/POC.md

hackmd.io/DUiTnVpLSVKihcyPloLdPg