CVE-2022-31854

EUVD-2022-53205
Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
Affected Products (NVD)
VendorProductVersion
codologiccodoforum
5.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html
https://codoforum.com
https://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.py
https://vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc
http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html
https://codoforum.com
https://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.py
https://vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc