CVE-2022-38323

ALTO 7.2CVE-2022-38323 · Published 15/09/2022 · updated 17/06/2026

En resumen

CVE-2022-38323 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a event management system (event management system project).
Probabilidad de explotación en los próximos 30 días (EPSS): 1.3%, mayor que el 69.8% de las vulnerabilidades.
Aún no hay una versión corregida: sigue el aviso del fabricante en Referencias.

Package	Affected versions	Patched versions
event management system event_management_system_project	`= 1.0`	No fix yet

Description

Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

References

Gsir97/bug_report · Exploit

Más vulnerabilidades de event management system

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free