CVE-2022-2751

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

A vulnerability was found in SourceCodester Company Website CMS and classified as critical. Affected by this issue is some unknown functionality of the file /dashboard/add-portfolio.php. The manipulation of the argument ufile leads to unrestricted upload. The attack may be launched remotely. The identifier of this vulnerability is VDB-206024.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-434

Affected software

No affected versions have been published.

Timeline

Published
Aug 11, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-275109.8Unauthorized access to Gateway user capabilitiesCVE-2022-275118.1Corruption of the system by a remote, unauthenticated user. The impact of this can include the reset of the administrator password at the neCVE-2022-275125.3Temporary disruption of the ADM license service. The impact of this includes preventing new licenses from being issued or renewed by Citrix CVE-2022-275139.6Remote desktop takeover via phishingCVE-2022-275169.8User login brute force protection functionality bypassCVE-2022-275189.8Unauthenticated remote arbitrary code executionCVE-2022-27527.8A vulnerability in the web server of Secomea GateManager allows a local user to impersonate as the previous user under some failed login conCVE-2022-275237.1A buffer over-read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using a maCVE-2022-275247.1An out-of-bounds read can be exploited in Autodesk TrueView 2022 may lead to an exposure of sensitive information or a crash through using aCVE-2022-275257.8A malicious crafted .dwf or .pct file when consumed through DesignReview.exe application could lead to memory corruption vulnerability by wrCVE-2022-275267.8A malicious crafted TGA file when consumed through DesignReview.exe application could lead to memory corruption vulnerability. This vulnerabCVE-2022-275277.8A Memory Corruption vulnerability may lead to code execution through maliciously crafted DLL files. It was fixed in PDFTron earlier than 9.0
CVE-2022-2751: Critical severity, CVSS 9.8 | Vulnix