CVE-2022-27064

Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploadedsongs.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

Design/Logic Flaw

Musical World v1 was discovered to contain an arbitrary file upload vulnerability via uploadedsongs.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file...

CVE-2022-27064

CVE-2022-27064 : In Musical World v1, an arbitrary file upload vulnerability in uploaded_songs.php allows remote code execution via a crafted PHP file. Public PoCs show uploading a shell to /songs/uploaded_songs/shell.php due to missing file validation. Connected advisories (Red Hat RH:CVE-2022-2...