CVE-2022-28606

Published: May 5, 2022Modified: Nov 21, 2024

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: NVD

Description

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.

Affected (1)

Products: Bosscms: Bosscms

Bosscms

1 product

Bosscms

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Bosscms Bosscms	Version 1.0.0

Related CWEs

CWE-434

Unrestricted Upload of File with Dangerous Type

The product allows the upload or transfer of dangerous file types that are automatically processed within its environment.

References (6)

https://www.bosscms.net/

Source: cve@mitre.org

Broken Link

https://www.cnvd.org.cn/flaw/show/CNVD-2022-04804

Source: cve@mitre.org

Third Party Advisory

https://www.cnvd.org.cn/patchInfo/show/313666

Source: cve@mitre.org

Third Party Advisory

https://www.bosscms.net/

Source: af854a3a-2127-422b-91ae-364da2661108

Broken Link

https://www.cnvd.org.cn/flaw/show/CNVD-2022-04804

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

https://www.cnvd.org.cn/patchInfo/show/313666

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party Advisory

Timeline

No history available yet.