exploitDog

CVE-2022-46610

Опубликовано: 10 янв. 2023

Источник: nvd

CVSS3: 8.8

EPSS Низкий

Описание

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

Ссылки

https://github.com/72wukong/72crm-9.0-PHP/issues/36
Exploit
Issue Tracking
Third Party Advisory
https://github.com/72wukong/72crm-9.0-PHP/issues/36
Exploit
Issue Tracking
Third Party Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:a:72crm:wukong_crm:9.0:*:*:*:*:*:*:*

EPSS

Процентиль: 88%

0.04241

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

CWE-434

Связанные уязвимости

GHSA-2wx5-x3v9-h4fr

CVSS3: 8.8

github

около 3 лет назад

72crm v9 was discovered to contain an arbitrary file upload vulnerability via the avatar upload function. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

EPSS

Процентиль: 88%

0.04241

Низкий

8.8 High

CVSS3

Дефекты

CWE-434

CWE-434