CVE-2022-28606

2022-05-0516:00:46

mitre

www.cve.org

arbitrary file upload

bosscms

wenzhou huoyin information technology co. ltd.

server control

AI Score

9.8

Confidence

High

EPSS

0.002

Percentile

64.5%

JSON

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.

References

www.bosscms.net/

www.cnvd.org.cn/flaw/show/CNVD-2022-04804

www.cnvd.org.cn/patchInfo/show/313666