Skip to content
OpenAdvisories
Critical · 9.8 CVE-2022-43074 EUVD-2022-46123GHSA-xfrj-q2wc-jq8h

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerabil…

Published Nov 10, 2022 · Updated May 1, 2025 · Assigned by mitre

Description

AyaCMS v3.1.2 was discovered to contain an arbitrary file upload vulnerability via the component /admin/fst_upload.inc.php. This vulnerability allows attackers to execute arbitrary code via a crafted PHP file.

References