by Kastro
Paper/Archive/CVE-2022-28606

CVE-2022-28606

mitre — An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd.

EPSS 2%CVSS 9.8
critical.is priorityof 100
44
CVSS 9.8 (NVD)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 74.3.743 × 2014.9No public exploit+100.0SSVC exploitation: unknown+100.0
Description · from the CVE record

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.

Affected

ProductAffectedFixed inSource
n/an/a–CNA

Scores by source

NVD9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

refcnvd.org.cn/flaw/show/CNVD-2022-04804refcnvd.org.cn/patchInfo/show/313666refbosscms.net