Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cvelistMitreCVELIST:CVE-2022-40797
HistoryNov 09, 2022 - 12:00 a.m.

CVE-2022-40797

2022-11-0900:00:00
mitre
www.cve.org
roxy fileman
remote code execution
.phar upload

9.9 High

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%

JSON

Roxy Fileman 1.4.6 allows Remote Code Execution via a .phar upload, because the default FORBIDDEN_UPLOADS value in conf.json only blocks .php, .php4, and .php5 files. (Visiting any .phar file invokes the PHP interpreter in some realistic web-server configurations.)

Related

packetstorm 1
cve 1
zdt 1
prion 1
nvd 1
packetstorm
packetstorm
Roxy Fileman 1.4.6 Remote Shell Upload
2022-11-21 00:00:00
cve
cve
CVE-2022-40797
2022-11-09 07:15:09
zdt
zdt
Roxy Fileman 1.4.6 Remote Shell Upload Exploit
2022-11-21 00:00:00
prion
prion
Design/Logic Flaw
2022-11-09 07:15:00
nvd
nvd
CVE-2022-40797
2022-11-09 07:15:09

9.9 High

AI Score

Confidence

High

0.056 Low

EPSS

Percentile

93.3%

JSON
Related for CVELIST:CVE-2022-40797
packetstorm1cve1zdt1prion1nvd1