CVE-2022-42458
Assigner: jpcert
Published: 2022-12-07T00:00:00
State: PUBLISHED
descriptions: value: Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered.
affected: vendor: Shift Tech Inc.
product: bingo!CMS
versions: version: version1.7.4.1 and earlier
status: affected
problemTypes: descriptions: type: text
description: Authentication Bypass Using an Alternate Path or Channel