CVE-2022-30804

MediumCVSS 6.5/10Last modified Jun 17, 2026

Description

elitecms v1.01 is vulnerable to Delete any file via /admin/delete_image.php?file=.

Metrics

CVSS 3.1 6.5/10CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H

Weakness enumeration

CWE-22

Affected software

VendorProductVersions
n/an/an/a

References

Timeline

Published
Jun 2, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-308089.8elitecms 1.0.1 is vulnerable to Arbitrary code execution via admin/manage_uploads.php.CVE-2022-308099.8elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_page.php?page=.CVE-2022-308109.8elitecms v1.01 is vulnerable to SQL Injection via admin/edit_post.php.CVE-2022-308139.8elitecms 1.01 is vulnerable to SQL Injection via /admin/add_post.php.CVE-2022-308149.8elitecms v1.01 is vulnerable to SQL Injection via /admin/add_sidebar.php.CVE-2022-308159.8elitecms 1.01 is vulnerable to SQL Injection via admin/edit_sidebar.php?page=2&sidebar=CVE-2022-308169.8elitecms 1.01 is vulnerable to SQL Injection via /admin/edit_sidebar.php.CVE-2022-308179.8Simple Bus Ticket Booking System 1.0 is vulnerable to SQL Injection via /SimpleBusTicket/index.php.CVE-2022-308187.2Wedding Management System v1.0 is vulnerable to SQL injection via /Wedding-Management/admin/blog_events_edit.php?id=31.CVE-2022-308198.8In Wedding Management System v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "photos_edit.php" file.CVE-2022-30826.5The miniOrange Discord Integration WordPress plugin before 2.1.6 does not have authorisation and CSRF in some of its AJAX actions, allowing CVE-2022-308208.8In Wedding Management v1.0, there is an arbitrary file upload vulnerability in the picture upload point of "users_edit.php" file.
CVE-2022-30804: Medium severity, CVSS 6.5 | Vulnix