CVE-2022-46610

2023-01-1000:00:00

mitre

www.cve.org

72crm

arbitrary file upload

vulnerability

avatar upload

attackers

execute arbitrary code

php file

0.001 Low

EPSS

Percentile

40.6%

JSON

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

References

github.com/72wukong/72crm-9.0-PHP/issues/36

0.001 Low

EPSS

Percentile

40.6%

JSON

Related for CVELIST:CVE-2022-46610