CVE-2022-4606

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

PHP Remote File Inclusion in GitHub repository flatpressblog/flatpress prior to 1.3.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-98

Affected software

No affected versions have been published.

Timeline

Published
Dec 18, 2022
Last modified
Jun 17, 2026
NVD status
Modified

Related CVEs from 2022

CVE-2022-460616.1AeroCMS v0.0.1 is vulnerable to ClickJacking.CVE-2022-460624.5Gym Management System v0.0.1 is vulnerable to Cross Site Request Forgery (CSRF).CVE-2022-46079.8A vulnerability was found in 3D City Database OGC Web Feature Service up to 5.2.0. It has been rated as problematic. This issue affects someCVE-2022-460707.5GV-ASManager V6.0.1.0 contains a Local File Inclusion vulnerability in GeoWebServer via Path.CVE-2022-460719.8There is SQL Injection vulnerability at Helmet Store Showroom v1.0 Login Page. This vulnerability can be exploited to bypass admin access.CVE-2022-460729.8Helmet Store Showroom v1.0 vulnerable to unauthenticated SQL Injection.CVE-2022-460736.1Helmet Store Showroom 1.0 is vulnerable to Cross Site Scripting (XSS).CVE-2022-460748.8Helmet Store Showroom 1.0 is vulnerable to Cross Site Request Forgery (CSRF). An unauthenticated user can add an admin account due to missinCVE-2022-460767.5D-Link DIR-869 DIR869Ax_FW102B15 is vulnerable to Authentication Bypass via phpcgi.CVE-2022-46087.5A vulnerability exists in HCI IEC 60870-5-104 function included in certain versions of the RTU500 series product. The vulnerability can onlyCVE-2022-460809.8Nexxt Nebula 1200-AC 15.03.06.60 allows authentication bypass and command execution by using the HTTPD service to enable TELNET.CVE-2022-460817.5In Garmin Connect 4.61, terminating a LiveTrack session wouldn't prevent the LiveTrack API from continued exposure of private personal infor
CVE-2022-4606: Critical severity, CVSS 9.8 | Vulnix