Lucene search
PRIOn knowledge basePRION:CVE-2022-3076HistorySep 26, 2022 - 1:15 p.m.
Design/Logic Flaw
2022-09-2613:15:00
PRIOn knowledge base
www.prio-n.com
9
wordpress
cm download manager
arbitrary files
high privilege users
arbitrary code execution
logic flaw
0.001 Low
EPSS
Percentile
43.1%
The CM Download Manager WordPress plugin before 2.8.6 allows high privilege users such as admin to upload arbitrary files by setting the any extension via the plugin’s setting, which could be used by admins of multisite blog to upload PHP files for example.
| CPE | Name | Operator | Version |
|---|---|---|---|
| cm_download_manager | lt | 2.8.6 |
Related
cve
cve
CVE-2022-3076
2022-09-26 13:15:11
nvd
nvd
CVE-2022-3076
2022-09-26 13:15:11
wpexploit
wpexploit
CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
2022-09-05 00:00:00
cvelist
cvelist
CVE-2022-3076 CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
2022-09-26 12:35:42
wpvulndb
wpvulndb
CM Download Manager < 2.8.6 - Admin+ Arbitrary File Upload
2022-09-05 00:00:00
cnvd
cnvd
WordPress CM Download Manager arbitrary file upload vulnerability
2022-09-28 00:00:00