Ucms任意上传漏洞(CVE-2022-35426)

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://nvd.nist.gov/vuln/detail/CVE-2022-35426
• https://github.com/advisories/GHSA-7g98-5gp8-66pw
• https://osv.dev/vulnerability/CVE-2022-35426
• https://cve.imfht.com/detail/CVE-2022-35426
• https://strobes.co/vi/cve/CVE-2022-35426
• https://www.incibe.es/en/incibe-cert/early-warning/vulnerabilities/cve-2022-35426
• https://github.com/cc-225/ucms_v1.6/issues/1

Related Vulnerabilities

• EyouCMS SQL注入漏洞
• yungoucms-sqli: YungouCMS sqli
• PoCCVE-2021-39501: EyouCMS 1.5.4 Open Redirect
• PoCCVE-2023-37645: EyouCms v1.6.3 - Information Disclosure
• PoCCVE-2023-41597: EyouCms v1.6.2 - Cross-Site Scripting
• PoCCVE-2024-22927: eyoucms v.1.6.5 - Cross-Site Scripting
• PoCmyucms-lfr: myucms lfr
• PoCeyoucms-installer: EyouCMS - Installation
• PoCmyucms-lfr: MyuCMS - Local File Inclusion
• eyoucms 默认口令
• EyouCms 存在后台代码执行漏洞
• EyouCms 存在信息泄露漏洞（CVE-2023-37645）