exploitDog

CVE-2022-36262

Опубликовано: 15 авг. 2022

Источник: nvd

CVSS3: 9.8

EPSS Низкий

Описание

An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.

Ссылки

http://taocms.com
Broken Link
URL Repurposed
https://github.com/taogogo/taocms
Release Notes
Third Party Advisory
https://github.com/taogogo/taocms/issues/34
Exploit
Third Party Advisory
https://github.com/taogogo/taocms/issues/34?by=xboy%28topsec%29
http://taocms.com
Broken Link
URL Repurposed
https://github.com/taogogo/taocms
Release Notes
Third Party Advisory
https://github.com/taogogo/taocms/issues/34
Exploit
Third Party Advisory
https://github.com/taogogo/taocms/issues/34?by=xboy%28topsec%29

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:taogogo:taocms:3.0.2:*:*:*:*:*:*:*

EPSS

Процентиль: 71%

0.00692

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94

Связанные уязвимости

GHSA-364p-6jx5-j5jv

CVSS3: 9.8

github

больше 3 лет назад

An issue was discovered in taocms 3.0.2. in the website settings that allows arbitrary php code to be injected by modifying config.php.

EPSS

Процентиль: 71%

0.00692

Низкий

9.8 Critical

CVSS3

Дефекты

CWE-94