CVE-2022-31854

Codoforum v5.1 was discovered to contain an arbitrary file upload vulnerability via the logo change option in the admin panel.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTNIST
7.2 HIGH
NETWORK
LOW
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
mitreCNA
---
---
CVEADP
---
---
Base Score
CVSS 3.x
EPSS Score
Percentile: 99%
VendorProductVersion
codologiccodoforum
5.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html
https://codoforum.com
https://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.py
https://vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc
http://packetstormsecurity.com/files/167782/CodoForum-5.1-Remote-Code-Execution.html
https://codoforum.com
https://github.com/Vikaran101/CVE-2022-31854/blob/main/exploit.py
https://vikaran101.medium.com/codoforum-v5-1-authenticated-rce-my-first-cve-f49e19b8bc