← CVE Intelligence

CVE-2022-42458

Shift Tech Inc. / bingo!CMS PUBLISHED

Description (CNA)

Authentication bypass using an alternate path or channel vulnerability in bingo!CMS version1.7.4.1 and earlier allows a remote unauthenticated attacker to upload an arbitrary file. As a result, an arbitrary script may be executed and/or a file may be altered.

Affected (CNA)

Vendor / productVersions
Shift Tech Inc. / bingo!CMSaffected version1.7.4.1 and earlier

CWE

No CWE identifiers supplied.

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.