CVE-2022-42154

2022-10-1700:00:00

mitre

www.cve.org

arbitrary file upload

74cmsse v3.13.0

php file

cve-2022-42154

AI Score

9.8

Confidence

High

EPSS

0.003

Percentile

65.1%

JSON

An arbitrary file upload vulnerability in the component /apiadmin/upload/attach of 74cmsSE v3.13.0 allows attackers to execute arbitrary code via a crafted PHP file.

References

github.com/xxhzz1/74cmsSE-Arbitrary-file-upload-vulnerability/issues/1