Lucene search

K
cvelistMitreCVELIST:CVE-2022-30007
HistoryMay 17, 2022 - 12:00 a.m.

CVE-2022-30007

2022-05-1700:00:00
mitre
www.cve.org
gxcms v1.5
file upload
vulnerability
template management
php file
server control

EPSS

0.001

Percentile

37.5%

GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server.

EPSS

0.001

Percentile

37.5%

Related for CVELIST:CVE-2022-30007