by Kastro
Paper/Archive/CVE-2022-50912

CVE-2022-50912

ImpressCMS ImpressCMS — ImpressCMS 1.4.4 - Unrestricted File Upload

EPSS 1%public exploitCVSS 9.8
critical.is priorityof 100
53
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 68.6.686 × 2013.7Exploit: SSVC poc+1010.0SSVC exploitation: poc+100.0
Description · from the CVE record

ImpressCMS 1.4.4 contains a file upload vulnerability with weak extension sanitization that allows attackers to upload potentially malicious files. Attackers can bypass file upload restrictions by using alternative file extensions .php2.php6.php7.phps.pht to execute arbitrary PHP code on the server.

Affected

ProductAffectedFixed inSource
ImpressCMS1.4.4–CNA

Scores by source

VulnCheck (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
VulnCheck (CNA)9.3CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total

References

exploitexploit-db.com/exploits/50890refimpresscms.orgrefgithub.com/ImpressCMS/impresscmswriteupvulncheck.com/advisories/impresscms-unrestricted-file-upload