CVE-2022-37190

CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE)

published September 13, 2022

CVSS
—
EPSS
46%
Percentile
98.8
In the wild
Unconfirmed
What it is

CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE). An authenticated user can control both parameters (action and function) from "/api/index.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.45769 · 98.8th percentile
Published
2022-09-13T22:07Z
EPSS history
Timeline
  • 13 SEP 22:07Z
    CuppaCMS 1.0 is vulnerable to Remote Code Execution (RCE)
    cvelistv5