CVE-2023-2245

MEDIO 6.3CVE-2023-2245 · Published 22/04/2023 · updated 17/06/2026

In breve

CVE-2023-2245 è una vulnerabilità MEDIO (CVSS 6.3) che riguarda hansuncms (hansuncms project).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 1.3%, superiore al 70.2% delle vulnerabilità.
Nessuna versione corretta ancora nota: segui l'avviso del produttore nei riferimenti.

Package	Affected versions	Patched versions
hansuncms hansuncms_project	`= 1.4.3`	No fix yet

Description

A vulnerability was found in hansunCMS 1.4.3. It has been declared as critical. This vulnerability affects unknown code of the file /ueditor/net/controller.ashx?action=catchimage. The manipulation leads to unrestricted upload. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used. VDB-227230 is the identifier assigned to this vulnerability.

References

MorStardust/hansuncmswebshell · Exploit
vuldb.com · Permissions Required
vuldb.com · Third Party Advisory

Altre vulnerabilità di hansuncms

Vedi tutto →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free