Skip to content
OpenAdvisories
Unscored CVE-2022-36749 EUVD-2022-39449GHSA-9538-25rq-j9g9

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnera…

Published Aug 30, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

RPi-Jukebox-RFID v2.3.0 was discovered to contain a command injection vulnerability via the component /htdocs/utils/Files.php. This vulnerability is exploited via a crafted payload injected into the file name of an uploaded file.

References