CVE-2022-25495: Malicious File Upload
Published Mar 15, 2022
·Updated
The component /jqueryfileupload/server/php/index.php of CuppaCMS v1.0 allows attackers to upload arbitrary files and execute arbitrary code via a crafted PHP file.
Affected Software
1 affected component
CuppaCMS CuppaCMS=1.0
Event History
Mar 15, 2022
CVE Published
via MITRE·05:33 PM
Data Sourced
via MITRE·05:33 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2022-25495?
CVE-2022-25495 has a high severity rating due to the risk of arbitrary code execution through file uploads.
2
How do I fix CVE-2022-25495?
To fix CVE-2022-25495, it is essential to upgrade CuppaCMS to a version that does not include this vulnerability.
3
What skills are required to exploit CVE-2022-25495?
Exploiting CVE-2022-25495 requires knowledge of PHP file structure and the ability to craft malicious PHP files.
4
What systems are affected by CVE-2022-25495?
CVE-2022-25495 specifically affects CuppaCMS version 1.0.
5
What are the potential impacts of CVE-2022-25495 exploitation?
The exploitation of CVE-2022-25495 can lead to unauthorized access and control over the affected server.