Unscored CVE-2022-33085 EUVD-2022-36141GHSA-x3r9-qf42-4572

ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename function at \espcms_p…

Published Jun 30, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

ESPCMS P8 was discovered to contain an authenticated remote code execution (RCE) vulnerability via the fetch_filename function at \espcms_public\espcms_templates\ESPCMS_Templates.

References

https://github.com/JeakinsCheung/ESPCMS-P8/blob/66fcc7f0fcc4d2325c0e31c9668f4c3362f0c06f/Arbitrary%20code%20execution%20vulnerability%20exists%20in%20ESPCMS%20management%20system.md