Unscored CVE-2022-34549 EUVD-2022-37502GHSA-vgp3-2wc7-6gv5

Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows atta…

Published Jul 27, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Sims v1.0 was discovered to contain an arbitrary file upload vulnerability via the component /uploadServlet. This vulnerability allows attackers to escalate privileges and execute arbitrary commands via a crafted file.

References

https://github.com/rawchen/sims/issues/6
http://cwe.mitre.org/data/definitions/434.html