Arbitrary File Upload Vulnerability in Musical World by D4rkP0w4r
CVE-2022-27064

8.8HIGH

Key Information:

Vendor: Musical World Project
Status: Musical World
Vendor: CVE Published:; 8 April 2022

🔔 Create Musical World Project Vulnerability Alert

What is CVE-2022-27064?

Musical World v1 has a security flaw due to an arbitrary file upload vulnerability located in the uploaded_songs.php file. This issue enables attackers to upload malicious PHP files, which can lead to unauthorized code execution on the server. By exploiting this vulnerability, an attacker can potentially gain control over the affected system, posing a significant risk to data integrity and system security.