CVE-2022-45527

EUVD-2022-48393 · Published Feb 8, 2023

File upload vulnerability in Future-Depth Institutional Management Website (IMS) 1.0, allows unauthorized attackers to directly upload malicious files to the courseimg directory.

Technologies

Institutional_Management_Website_Project Institutional Management Website

Weaknesses

CWE-434

CVSS scores

v3.19.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

MITRE ATT&CK

Inferred

Where this vulnerability fits in an attack

ReconImpact

Initial Access Execution Stealth

T1190Exploit Public-Facing Application T1574.010Services File Permissions Weakness

References

https://github.com/Future-Depth/IMS/issues/2

Potentially impacted assets

See if this affects your attack surface