3 matches found
PHP2Shell-Exploit-Framework-v2.0
PHP2Shell Exploit Framework v2.0 CVE-2026-109618 / CVE-202...
9.8CVSS9.2AI score0.99999EPSS
SaveExploits518
Remote code execution
ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHPSESSIONUPLOADPROGRESS when the PHP installation supports...
7.5CVSS9.8AI score0.06354EPSS
SaveExploits1References3Affected Software1
CVE-2022-24977
ImpressCMS before 1.4.2 allows unauthenticated remote code execution via ...../// directory traversal in origName or imageName, leading to unsafe interaction with the CKEditor processImage.php script. The payload may be placed in PHPSESSIONUPLOADPROGRESS when the PHP installation supports...
9.9AI score
SaveExploits0References5
20