CVE-2022-25411

2022-02-2823:15:12

Google

osv.dev

8.2 High

AI Score

Confidence

High

0.005 Low

EPSS

Percentile

77.2%

A Remote Code Execution (RCE) vulnerability at /admin/options in Maxsite CMS v180 allows attackers to execute arbitrary code via a crafted PHP file.

CPENameOperatorVersion
cmseq0.94
cmseq0.91
cmseq97
cmseq0.89
cmseq0.88
cmseq104
cmseq0.90
cmseq0.92
cmseq0.87
cmseq0.87.1

Name	Operator	Version
cms	eq	0.94
cms	eq	0.91
cms	eq	97
cms	eq	0.89
cms	eq	0.88
cms	eq	104
cms	eq	0.90
cms	eq	0.92
cms	eq	0.87
cms	eq	0.87.1

Rows per page:

1-10 of 211

References

github.com/maxsite/cms/issues/487