Lucene search
GoogleOSV:CVE-2022-26965HistoryMar 18, 2022 - 7:15 a.m.
CVE-2022-26965
2022-03-1807:15:00
Google
osv.dev
5
In Pluck 4.7.16, an admin user can use the theme upload functionality at /admin.php?action=themeinstall to perform remote code execution.
| CPE | Name | Operator | Version |
|---|---|---|---|
| pluck | eq | 4.7.13 | |
| pluck | eq | 4.7.11 | |
| pluck | eq | 4.7.15 | |
| pluck | eq | 4.7.16-dev3 | |
| pluck | eq | 4.7.9-dev3 | |
| pluck | eq | 4.7.11-dev2 | |
| pluck | eq | 4.7 | |
| pluck | eq | 4.7.3 | |
| pluck | eq | 4.7.9-dev1 | |
| pluck | eq | 4.7.8 |
Related
prion
prion
Remote code execution
2022-03-18 07:15:00
nvd
nvd
CVE-2022-26965
2022-03-18 07:15:06
zdt
zdt
Pluck CMS 4.7.16 - Remote Code Execution (Authenticated) Exploit
2022-03-16 00:00:00
packetstorm
packetstorm
Pluck CMS 4.7.16 Shell Upload
2022-03-16 00:00:00
cve
cve
CVE-2022-26965
2022-03-18 07:15:06
cvelist
cvelist
CVE-2022-26965
2022-03-18 06:33:34
exploitdb
exploitdb
Pluck CMS 4.7.16 - Remote Code Execution (RCE) (Authenticated)
2022-03-16 00:00:00