VULNERABILITY INTELLIGENCE

CVE-2022-28606

CVSS score9.8 CRITICAL
EPSS probability1.50%
CISA KEVNot currently listed
Published2022-05-05
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Description

An arbitrary file upload vulnerability exists in Wenzhou Huoyin Information Technology Co., Ltd. BossCMS 1.0, which can be exploited by an attacker to gain control of the server.

Weakness classification

  • nvd@nist.gov: CWE-434

Primary references