Search vulnerabilities

Results 2

Export CSV
CVE-2022-24652

sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in php code execution in /admin/upload/upload.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Products
CVE-2022-24651

sentcms 4.0.x allows remote attackers to cause arbitrary file uploads through an unauthorized file upload interface, resulting in PHP code execution through /user/upload/upload.

CVSS 3.1 · 9.8 Critical EPSS 2.7% KEV · Not listed
Vendors
Products