~ / search / GHSA-jxg9-2ch7-f552

GHSA-jxg9-2ch7-f552

Feehi CMS arbitrary code execution via crafted PHP file

Source: GitHub Advisory Database (reviewed) High CVE-2022-34971

Packages

EcosystemPackageAffectedFixed in
Packagist feehi/cms <= 2.1.1 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

An arbitrary file upload vulnerability in the Advertising Management module of Feehi CMS v2.1.1 allows attackers to execute arbitrary code via a crafted PHP file.

References

External links from the advisory. They lead to third-party sites.