Arbitrary File Upload Vulnerability in Feehi CMS by Liufee
CVE-2022-34971

8.8HIGH

Key Information:

Vendor

Feehi

Status
Feehi Cms
Vendor
CVE Published:
27 July 2022

What is CVE-2022-34971?

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to upload crafted PHP files, enabling the execution of arbitrary code on the server. This security flaw poses a significant risk as it can lead to unauthorized access and manipulation of sensitive data, thereby potentially compromising the integrity and confidentiality of affected systems.

References

https://github.com/liufee/cms/issues/62
x_refsource_MISC

CVSS V3.1

Score:
8.8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.