CVE-2022-27352

Simple House Rental System v1 was discovered to contain an arbitrary file upload vulnerability via /app/register.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27352

creationtimestamp| type| source ---|---|--- 2022-04-08 12:38:09+00:00| seen| https://t.me/cibsecurity/40354...

CVE-2022-27352

The CVE-2022-27352 issue affects Simple House Rental System v1, where /app/register.php allows arbitrary file upload due to missing validation. The vulnerability enables remote code execution by uploading a crafted PHP file and then accessing it (e.g., /app/uploads/shell.php), as demonstrated by ...