CVE-2022-27349

Опубликовано: 08 апр. 2022

Источник: nvd

CVSS3: 7.2

CVSS2: 6.5

EPSS Низкий

Описание

Social Codia SMS v1 was discovered to contain an arbitrary file upload vulnerability via addteacher.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

Ссылки

http://packetstormsecurity.com/files/166655/Social-Codia-SMS-1-Shell-Upload.html
Exploit
Third Party Advisory
VDB Entry
https://drive.google.com/file/d/10vgciE0FwkZpzLZf9JSGGyvq3hwehXMs/view?usp=sharing
Exploit
Third Party Advisory
https://github.com/D4rkP0w4r/sms-Unrestricted-File-Upload-RCE-POC
Exploit
Third Party Advisory
http://packetstormsecurity.com/files/166655/Social-Codia-SMS-1-Shell-Upload.html
Exploit
Third Party Advisory
VDB Entry
https://drive.google.com/file/d/10vgciE0FwkZpzLZf9JSGGyvq3hwehXMs/view?usp=sharing
Exploit
Third Party Advisory
https://github.com/D4rkP0w4r/sms-Unrestricted-File-Upload-RCE-POC
Exploit
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:socialcodia:social_codia_sms:1.0:*:*:*:*:*:*:*

EPSS

Процентиль: 86%

0.03075

Низкий

7.2 High

CVSS3

6.5 Medium

CVSS2

Дефекты

CWE-434

Связанные уязвимости

GHSA-j3gc-gjm6-6mwp