CVE-2022-2736

A vulnerability was found in SourceCodester Company Website CMS. It has been classified as critical. This affects an unknown part of the file /dashboard/updatelogo.php of the component Background Upload Logo Icon. The manipulation of the argument xfile/ufile leads to unrestricted upload. It is possible to initiate the attack remotely. The identifier VDB-205881 was assigned to this vulnerability.

Score

CVSS 3.1 9.8 Critical

Status

Modified - cna@vuldb.com

Published

2022-08-11

Last modified

2025-04-15

Weaknesses

CWE-434

Affected products

• Company Website Cms (Company Website Cms Project)
• Company Website Cms (Sourcecodester)

References

• https://vuldb.com/?id.205881