CVE-2022-2909: Malicious File Upload
First published: Sat Aug 20 2022(Updated: )
Credit: cna@vuldb.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Simple And Nice Shopping Cart Script Project Simple And Nice Shopping Cart Script |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2022-2909?
The severity of CVE-2022-2909 is high, with a CVSS score of 8.8.
What is the affected software of CVE-2022-2909?
The affected software of CVE-2022-2909 is Simple And Nice Shopping Cart Script.
How does the vulnerability of CVE-2022-2909 manifest?
The vulnerability of CVE-2022-2909 manifests in the unrestricted upload capability in the file /mkshop/Men/profile.php.
Can the attack be launched remotely for CVE-2022-2909?
Yes, the attack for CVE-2022-2909 can be launched remotely.
Is there a fix available for CVE-2022-2909?
Currently, there is no known fix available for CVE-2022-2909. It is recommended to apply any patches or updates provided by the software vendor if they become available.
- collector/nvd-index
- vendor/simple and nice shopping cart script project
- product/simple and nice shopping cart script
- canonical/simple and nice shopping cart script project simple and nice shopping cart script