CVE-2022-28590

A Remote Code Execution RCE vulnerability exists in Pixelimity 1.0 via admin/admin-ajax.php?action=installtheme...

Pixelimity Arbitrary File Upload (CVE-2022-28590)

An arbitrary file upload vulnerability exists in Pixelimity. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the affected system...

Exploit for CVE-2022-28590

CVE-2022-28590 The original discovery and manual PoC is from...

CVE-2022-28590

creationtimestamp| type| source ---|---|--- 2022-05-03 18:28:50+00:00| seen| https://t.me/cibsecurity/41815 2022-05-10 13:27:31+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/5974...

CVE-2022-28590

CVE-2022-28590 affects Pixelimity 1.0. The vulnerability enables remote code execution via admin/admin-ajax.php?action=install_theme. Multiple sources describe an arbitrary file upload path that can lead to code execution, with public PoC showing webshell upload to facilitate further access. The ...