PT-2022-19100
CVE-2022-28606
·
Published
2022-05-05
·
Updated
2022-05-13
Description by
CVSS 3.1
9.8
CriticalMetricsAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Wenzhou Huoyin Information Technology Co., Ltd. BossCMS version 1.0
Description
An arbitrary file upload issue exists, which can be exploited by an attacker to gain control of the server.
Recommendations
For Wenzhou Huoyin Information Technology Co., Ltd. BossCMS version 1.0, consider restricting file upload capabilities to prevent exploitation until a fix is available.
Found an issue in the description? Have something to add? Feel free to write us 👾