CVE-2023-1442

HOCH 7.2CVE-2023-1442 · Published 17/03/2023 · updated 17/06/2026

Kurz gesagt

CVE-2023-1442 ist eine Schwachstelle (HOCH (CVSS 7.2)) in qykcms (qykcms).
Wahrscheinlichkeit einer Ausnutzung in den nächsten 30 Tagen (EPSS): 0.93%, höher als bei 60.9% aller Schwachstellen.
Noch keine gepatchte Version bekannt: Herstellerhinweise unter Referenzen verfolgen.

Package	Affected versions	Patched versions
qykcms qykcms	`= 4.3.0`	No fix yet

Description

A vulnerability was found in Meizhou Qingyunke QYKCMS 4.3.0. It has been classified as problematic. This affects an unknown part of the file /admin_system/api.php of the component Update Handler. The manipulation of the argument downurl leads to unrestricted upload. It is possible to initiate the attack remotely. The exploit has been disclosed to the public and may be used. The associated identifier of this vulnerability is VDB-223287.

References

VG00000/- · Exploit
vuldb.com · Permissions Required
vuldb.com · Permissions Required

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free