CVE-2022-3552

Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1...

Exploit for Unrestricted Upload of File with Dangerous Type in Boxbilling

CVE-2022-3552 BoxBilling=4.22.1.5 - R...

BoxBilling <= 4.22.1.5 - Remote Code Execution Vulnerability

Exploit Title: BoxBilling POC Video : https://drive.google.com/file/d/1m2glCeJ9QXc8epuY2QfvbWwjLTJ8Hjx/view?usp=sharing...

BoxBilling 4.22.1.5 Remote Code Execution

Exploit Title: BoxBilling POC Video : https://drive.google.com/file/d/1m2glCeJ9QXc8epuY2QfvbWwjLTJ8Hjx/view?usp=sharing...

BoxBilling&lt;=4.22.1.5 - Remote Code Execution (RCE)

Exploit Title: BoxBilling POC Video : https://drive.google.com/file/d/1m2glCeJ9QXc8epuY2QfvbWwjLTJ8Hjx/view?usp=sharing...

CVE-2022-3552

creationtimestamp| type| source ---|---|--- 2022-10-18 00:13:39+00:00| seen| https://t.me/cibsecurity/51644 2023-03-28 00:00:00+00:00| exploited| https://www.exploit-db.com/exploits/51108 2025-04-28 05:00:06+00:00| published-proof-of-concept| Telegram/pAhL0Y0-25WuKbTjtFnfRXs2-BuvkpahhgLLseEPoVFP0...

CVE-2022-3552 Unrestricted Upload of File with Dangerous Type in boxbilling/boxbilling

Unrestricted Upload of File with Dangerous Type in GitHub repository boxbilling/boxbilling prior to 0.0.1...

CVE-2022-3552

CVE-2022-3552 affects BoxBilling/open-source BoxBilling up to and including 4.22.1.5 and prior to 0.0.1, with vulnerability in unrestricted upload of files of dangerous type. The root cause is permissive file upload via the administrative API endpoint (e.g., /index.php?_url=/api/admin/Filemanager...