CVE-2022-2740 — SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload

CVE-2022-2740

SourceCodester Company Website CMS Add Blog add-blog.php unrestricted upload PUBLISHED

Description (CNA)

A vulnerability was found in SourceCodester Company Website CMS. It has been declared as critical. This vulnerability affects unknown code of the file /dashboard/add-blog.php of the component Add Blog. The manipulation of the argument ufile leads to unrestricted upload. The attack can be initiated remotely. VDB-205882 is the identifier assigned to this vulnerability.

Affected (CNA)

Vendor / product	Versions
SourceCodester / Company Website CMS	affected n/a

CWE

CWE-434

References

https://vuldb.com/?id.205882

ADP enrichment

CVE

No English description supplied.

https://vuldb.com/?id.205882

CISA-ADP

No English description supplied.

No references supplied.