CVE-2022-2694
Assigner: VulDB
Published: 2022-08-06T17:21:43
State: PUBLISHED
affected: product: Company Website CMS
vendor: SourceCodester
versions: status: affected
version: n/a
descriptions: value: A vulnerability was found in SourceCodester Company Website CMS and classified as critical. This issue affects some unknown processing. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The exploit has been disclosed to the public and may be used. The identifier VDB-205817 was assigned to this vulnerability.
metrics: cvssV3_1: attackComplexity: LOW
attackVector: NETWORK
availabilityImpact: LOW
baseScore: 6.3
baseSeverity: MEDIUM
confidentialityImpact: LOW
integrityImpact: LOW
privilegesRequired: LOW
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L
version: 3.1
problemTypes: descriptions: cweId: CWE-434
description: CWE-434 Unrestricted Upload
type: CWE
title: SourceCodester Company Website CMS unrestricted upload
x_generator: vuldb.com