← back
CVE-2022-31854

CVE-2022-31854

EPSS 24.9%
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.
Affected products
n/a · n/a
public PoCs found — 3
githubgithub.com/Vikaran101/CVE-2022-31854★ 5cve_referencepacketstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.htmlunverifiedexploitdbwww.exploit-db.com/exploits/50978unverified
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.

Want to know if your infrastructure is exposed to this?

Talk to TrueHacking →
References
http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.htmlhttps://codoforum.comhttps://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.pyhttps://vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc