Ecosyste.ms: Advisories

Security Advisories: GSA_kwCzR0hTQS1qeGc5LTJjaDctZjU1Ms4AAttV

Feehi CMS arbitrary code execution via crafted PHP file

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.

Permalink: https://github.com/advisories/GHSA-jxg9-2ch7-f552
JSON: https://advisories.ecosyste.ms/api/v1/advisories/GSA_kwCzR0hTQS1qeGc5LTJjaDctZjU1Ms4AAttV
Source: GitHub Advisory Database
Origin: Unspecified
Severity: High
Classification: General
Published: over 1 year ago
Updated: about 1 year ago

CVSS Score: 8.8
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Identifiers: GHSA-jxg9-2ch7-f552, CVE-2022-34971
References:

• https://nvd.nist.gov/vuln/detail/CVE-2022-34971
• https://github.com/liufee/cms/issues/62
• https://github.com/advisories/GHSA-jxg9-2ch7-f552

Repository: https://github.com/liufee/cms
Blast Radius: 1.0

Affected Packages