Skip to content
OpenAdvisories
Medium · 6.3 CVE-2022-3771 EUVD-2022-7171GHSA-vqvm-qrwh-69h7

easyii CMS File Upload Management Upload.php file unrestricted upload

Published Oct 31, 2022 · Updated Apr 15, 2025 · Assigned by VulDB

Description

A vulnerability, which was classified as critical, has been found in easyii CMS. This issue affects the function file of the file helpers/Upload.php of the component File Upload Management. The manipulation leads to unrestricted upload. The attack may be initiated remotely. The identifier VDB-212501 was assigned to this vulnerability.

Affected products

VendorProductAffectedFixed
easyii CMS — —

Affected packages

EcosystemPackageAffectedFixedRecord
Packagist noumo/easyii <= 0.9 — GHSA-vqvm-qrwh-69h7

References