CVE-2022-2751

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/add-portfolio.php. The manipulation of the argument ufile leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206024.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

Vendor	Product	Versions
SourceCodester	Company Website CMS	n/a

References

https://vuldb.com/?id.206024Permissions Required, Third Party Advisory, VDB Entry
https://vuldb.com/?id.206024Permissions Required, Third Party Advisory, VDB Entry

Timeline

Published: Aug 11, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-275109.8Unauthorized access to Gateway user capabilities CVE-2022-275118.1Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the ne CVE-2022-275125.3Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix CVE-2022-275139.6Remote desktop takeover via phishing CVE-2022-275169.8User login brute force protection functionality bypass CVE-2022-275189.8Unauthenticated remote arbitrary code execution CVE-2022-27527.8A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login con CVE-2022-275237.1A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a ma CVE-2022-275247.1An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a CVE-2022-275257.8A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wr CVE-2022-275267.8A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerab CVE-2022-275277.8A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0