CVE-2022-2418 — URVE Web Manager img_upload.php unrestricted upload

Description (CNA)

A vulnerability was found in URVE Web Manager. It has been classified as critical. This affects an unknown part of the file kreator.html5/img_upload.php. The manipulation leads to unrestricted upload. Access to the local network is required for this attack. The exploit has been disclosed to the public and may be used.

Affected (CNA)

Vendor / product	Versions
URVE / Web Manager	affected n/a

CWE

CWE-434

References

https://github.com/joinia/webray.com.cn/blob/main/URVE/URVE%20Web%20Manager%20img_upload.php%20File%20upload%20vulnerability.md
https://vuldb.com/?id.203901

ADP enrichment

CVE

No English description supplied.

https://github.com/joinia/webray.com.cn/blob/main/URVE/URVE%20Web%20Manager%20img_upload.php%20File%20upload%20vulnerability.md
https://vuldb.com/?id.203901

CISA-ADP

No English description supplied.

No references supplied.