CVE-2022-24652

sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in php code execution in /admin/upload/upload.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cve@mitre.org

Published

2022-03-10

Last modified

2024-08-03

Weaknesses

CWE-434

Affected products

• Sentcms (Sentcms)

References

• https://blog.hanayuzu.top/articles/37dacab4.html