Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-33vr-hv7f-mv36

Опубликовано: 11 нояб. 2025
Источник: github
Github: Не прошло ревью
CVSS3: 3.8

Описание

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.

EPSS

Процентиль: 31%
0.00117
Низкий

3.8 Low

CVSS3

Дефекты

CWE-434

Связанные уязвимости

CVSS3: 7.2
nvd
3 месяца назад

An authenticated arbitrary file upload vulnerability in the /uploads/ endpoint of CMS Made Simple Foundation File Manager v2.2.22 allows attackers with Administrator privileges to execute arbitrary code via uploading a crafted PHP file.

EPSS

Процентиль: 31%
0.00117
Низкий

3.8 Low

CVSS3

Дефекты

CWE-434