CVE-2022-30007

GXCMS V1.5 has a file upload vulnerability in the background

published May 17, 2022

CVSS
—
EPSS
1%
Percentile
61.7
In the wild
Unconfirmed
What it is

GXCMS V1.5 has a file upload vulnerability in the background. The vulnerability is the template management page. You can edit any template content and then rename to PHP suffix file, after calling PHP file can control the server.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00976 · 61.7th percentile
Published
2022-05-17T00:00Z
EPSS history
Timeline
  • 17 MAY 00:00Z
    GXCMS V1.5 has a file upload vulnerability in the background
    cvelistv5