CVE-2022-2694: fallo de gravedad media en SourceCodester Company Website CMS
SourceCodester Company Website CMS unrestricted upload
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 0.9%
A vulnerability was found in SourceCodester Company Website CMS and classified as critical. This issue affects some unknown processing. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205817 was assigned to this vulnerability.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
Productos afectados
SourceCodester · Company Website CMSCVEs relacionadas — SourceCodester Company Website CMS
En el mismo producto, de las más peligrosas a las menos.
CVE-2022-2765MEDIUMSourceCodester Company Website CMS settings improper authenticationEPSS 1.2%CVE-2023-5919MEDIUMSourceCodester Company Website CMS Create Blog Page createblog unrestricted uploadEPSS 0.9%CVE-2022-2751MEDIUMSourceCodester Company Website CMS add-portfolio.php unrestricted uploadEPSS 0.7%CVE-2022-2750MEDIUMSourceCodester Company Website CMS Add Service add-service.php unrestricted uploadEPSS 0.7%CVE-2022-2740MEDIUMSourceCodester Company Website CMS Add Blog add-blog.php unrestricted uploadEPSS 0.7%CVE-2022-2736MEDIUMSourceCodester Company Website CMS Background Upload Logo Icon updatelogo.php unrestricted uploadEPSS 0.7%