CVE-2022-41538 in Wedding Planner

Résumé

par VulDB • 13/07/2026

Il componente /Wedding-Management-PHP/admin/photos_add.php di Wedding Planner v1.0 presenta una vulnerabilità di caricamento arbitrario di file (arbitrary file upload). Questa vulnerabilità consente agli attaccanti di eseguire codice arbitrario tramite un file PHP manipolato ad hoc.

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

• Réserver: 26/09/2022
• Divulgation: 14/10/2022
• Modérer: accepté
• Entrée: VDB-210835
• CPE: prêt
• CWE: CWE-434 (confirmé)
• CVSS: 8.8 (NVD)
• EPSS: 0.01034
• KEV: non
• Activités: très faible

Sources

• MITRE: https://www.cve.org/CVERecord?id=CVE-2022-41538
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2022-41538
• CVE Details: https://www.cvedetails.com/cve/CVE-2022-41538/