CVE-2022-38323

Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php

published September 15, 2022

CVSS
—
EPSS
1%
Percentile
69.6
In the wild
Unconfirmed
What it is

Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01270 · 69.6th percentile
Published
2022-09-15T00:39Z
EPSS history
Timeline
  • 15 SEP 00:39Z
    Event Management System v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /Royal_Event/update_image.php
    cvelistv5